# Firewall behavior with a Next Generation policy
<a name="firewall-behavior-v2"></a>

When a firewall uses a Next Generation policy, it filters traffic with two inspection engines: a firewall engine for access control and an IPS engine for threat detection and prevention. For information about Next Generation policies, see [Next Generation policies](firewall-policies-v2.md).