In the Local Data Center Edge use case, which capabilities are provided by NGFW & NGIPS?

Identity Services Engine (ISE) provides network access control and policy enforcement based on endpoint identity, which is a separate capability not delivered by NGFW or NGIPS in the datacenter edge use case.

NGFW and NGIPS are purpose-built to reduce the attack surface at the datacenter edge by performing deep packet inspection, application-layer filtering, and inline intrusion prevention. They enforce least-privilege access policies, detect lateral movement attempts, and block exploits before they reach internal workloads, directly limiting the exploitable perimeter of on-premises infrastructure.

Platform Exchange Grid (pxGrid) is an ISE feature used for sharing security context and telemetry between Cisco platform components, not a function of NGFW or NGIPS.

File Retrospection and Trajectory are specific capabilities of Cisco AMP for Networks and are not features provided by NGFW or NGIPS in any use case.