IDG Answers is a community of experts who are passionate about technology. Ask a question or answer one below.
The definition of what is "next gen" varies widely, and can mean "any firewall that does something more intelligent than allow/block particular ports." McAfee, Juniper, Checkpoint and others all have something that fits this -- for example, can you block Facebook games but still allow people to access their Facebook wall and message traffic without having to write (and test) a lot of custom rules?
You can take a look at a short video that I did here: