ngfw next generation firewall features: parse dns and record domain ip mapping count traffic in bytes blacklist ip addresses domain filtering visualisation ICMP flood detection port scan detection fast mitigation logic issues: is_ip_blacklisted is slow. need to optimize it.