Two features that are found in Palo Alto Networks NGFW but are absent in a legacy firewall product are: Policy match is based on application and Identification of application is possible on any port. Traditional firewalls typically control traffic based on IP, port, and protocol, but NGFWs offer advanced features such as application-aware traffic control and the ability to identify applications regardless of the port being used.