Traditional firewalls operate mainly on Layers 3 and 4 of the OSI model, managing network traffic based on port and protocol. In contrast, NGFWs can operate up to Layer 7, allowing for deep-packet inspection. This means NGFWs can inspect app-level threats and offer features like application control, intrusion prevention systems, and threat intelligence, providing a more granular and comprehensive analysis of network traffic.