A next-generation firewall (NGFW) combines a traditional firewall with other network device filtering functions, such as an application firewall using in-line deep packet inspection (DPI), and an intrusion prevention system (IPS). Other techniques employed include TLS/SSL encrypted traffic inspection, website filtering, and antivirus inspection.