A next-generation firewall (NGFW) is a hardware- or software-based network security system that detects and blocks sophisticated attacks by enforcing security policies at the application level in addition to the port and protocol level. Next-generation firewalls integrate enterprise firewalls, an intrusion prevention system (IPS) and application control.