ext Generation Firewall is the advanced version of a traditional/regular firewall that includes additional features (licensed subscription features and it varies between vendors) such as Application Control, Anti Malware Protection, Intrusion Detection System (IDS) & Intrusion Prevention System (IPS), Sandboxing (advanced threat prevention), Web Proxy, URL/Content/Web Filtering, Threat Intelligence, etc. Thus it improves the ability of an admin to control a network. NGFW also helps companies to monitor and control the application use and the websites accessed by their employees.

NGFW can be deployed On-Premises, in Public and or Private Clouds. The deployment in cloud is code based and available in the Market-Stores of the Vendors.

The features are important criteria for the choice of the Firewall/ Next Generation Firewall , however the right Sizing is essential to good functioning and to adapt appropriate management practices. An undersized firewall can cause degradation to the network performance and security posture. In most cases, a firewall is sized by User Count or Firewall Throughput or both (It is a measure of total devices including your BYOD devices that can access a single firewall at the same time & the focus should be on all the users)

Check the link for more details on Firewall / NGFW Sizing.