During which phases of protection would Cisco's Next Generation Firewalls be deployed?

Deploying a firewall after an attack is a reactive measure and would not have prevented the initial security breach or established necessary proactive controls.

While NGFWs detect and block threats during an attack, their deployment is a preventative 'before' step to establish these capabilities, not during the attack itself.

While NGFWs actively detect and block threats during an attack, their deployment is a preventative 'before' step; they are not deployed *after* an attack has already occurred.

Cisco's Next Generation Firewalls (NGFWs) are deployed before an attack occurs as a proactive and foundational security measure. Their role is to establish security policies, inspect and filter traffic, and prevent known and unknown threats from penetrating the network, thereby mitigating attacks at the perimeter or internal segmentation points before they can cause damage.