Born as an IPS solution NetASQ rapidly leveraged their ability to do deep packet inspection, (or, as IDC terms it, complete content inspection) to apply policies based not just on source-destination-port, but on content of assembled packet streams.

FORBES: Demystifying Next Gen Firewalls and UTM