Which Cisco firewall solution supports configuration via Cisco Policy Language?

Cisco NGFW (Next-Generation Firewall) solutions, such as Firepower Threat Defense (FTD), are typically managed via Cisco Firepower Management Center (FMC) using a GUI, not directly via Cisco Policy Language on the device CLI.

CBAC (Context-Based Access Control) is an older stateful firewall feature on Cisco IOS routers that uses standard CLI commands like `ip inspect`, not the hierarchical Cisco Policy Language.

IPS (Intrusion Prevention System) functionality on Cisco devices is typically part of broader security solutions or dedicated appliances, managed through their specific interfaces or command sets, not primarily through Cisco Policy Language.

Cisco Zone-Based Firewall (ZFW) introduced a modular, zone-based approach to firewall configuration on Cisco IOS routers, which is entirely managed using the Cisco Policy Language (CPL) for defining security zones, class-maps, policy-maps, and zone-pairs.