The NGFW must assist users in creating more secure policies in accordance with the minimum authorization principle to allow only necessary applications, estimate application and policy risk, and provide defense measures and policy tuning suggestions.