As you listen to Francois, compare his story to that of the so-called Next Generation Firewall vendors who have settled on a subset of network protections to define NGF, namely IPS and application awareness.
Exhibit A in this regard is a technology called Intrusion Prevention Systems, or IPS. The premise of an IPS is that you can examine a network flow, and based on complex algorithms, identify and stop potential attacks on your infrastructure such as your web servers.