In addition to access control, NGFWs can block modern threats such as advanced malware and application layer attacks. They also add other features, such as application control, IPS, and often more advanced threat prevention features such as sandboxing.