Next-generation firewalls include many cutting-edge features. Which of the following is NOT a common next-generation firewall capability?

Next-generation firewalls offer a variety of defensive capabilities, but it's important to note that SQL injection is an attack, not a defense mechanism. Along with geolocation, intrusion detection and prevention systems (IDS/IPS), and sandboxing capabilities, many next-generation firewalls come equipped with web application firewalls, load balancing, IP reputation and URL filtering, and antimalware/antivirus functionality.