A next-generation firewall must be able to inspect traffic in all the upper layers of the OSI model. It needs to provide more than just traditional access-list security enforcement. Palo Alto Networks firewalls can perform all of this and much more. Powerful security options included in the platform are antivirus, anti-spyware, URL filtering, and DoS protection, to name a few. In this section, we will discuss and demonstrate, in detail, how to take advantage of those security features and protect our network to a lower level.