Which two features must a next generation firewall include? (Choose two.)