With NGFW, the attack detection to response time can be reduced considerably thanks to a scenario-based mechanism called SOAR (Security Orchestration, Automation and Response).
Currently enjoying strong popularity, this concept enables the administrator to define scheduled or detection-triggered scenarios that specify automated actions to be taken in response to various events. Such an approach enables flexible configuration of security policies, reduces human intervention by automating repetitive tasks, and allows prioritizing of scenarios to ensure rapid response to critical threats.