At which OSI Layer do Next Generation Firewalls capable of analyzing application traffic operate?

Next Generation Firewalls are capable of analyzing application traffic at Layer 7 of the OSI model. Layer 7 is the Application Layer, which is where the application-level protocols, such as HTTP and FTP, are implemented. Next Generation Firewalls are able to inspect the application traffic and apply rules based on the content of the application-level packets.

For more information on the OSI model and Next Generation Firewalls, please refer to the following resources:

• OSI Model: https://en.wikipedia.org/wiki/OSI_model  • Next Generation Firewalls: https://en.wikipedia.org/wiki/Next-generation_firewall