Next generation firewalls provide all of the following except:

The ability to identify applications regardless of the port, protocol, or security evasion tools used.

The ability to automatically update applications on a client computer with security patches.

The ability to identify users regardless of the device or IP address.

An application$-$centric approach to firewall control.