* Application Control: Accurately identifies applications regardless of port, protocol, SSL encryption, or evasion attempts.
* User-ID: Enables policy enforcement and access control independent of IP addresses.
* Content-ID: Scans in real time for network threats such as attacks, scans, spyware, viruses, and bots.
* Control Plane / Data Plane Separation: Separates management functions from data processing for stability and efficiency.
* Single-Pass Architecture: Processes all security functions in a single pass for high performance.
* Virtual Systems: Fully segmented logical firewalls for flexible deployment in diverse virtualized environments.
* WildFire: Detects APT attacks and modern malware.
* VPN Support: Provides Site-to-Site (IPSec VPN) and SSL VPN capabilities.
* Multiple Deployment Modes: Supports Tap Mode, Virtual Wire Mode, Layer 3 Mode, and Layer 2 Mode—multiple modes can run simultaneously on a single physical firewall.
