The evolution of modern data centres has led to applications and data being increasingly distributed across hybrid infrastructures. While this helps to enable greater agility for business-critical workflows, it simultaneously expands the organizational attack surface while obscuring visibility and inhibiting controls. Network engineering and operations leaders require integrated security with advanced capabilities designed for protecting hybrid IT data-centre environments. Specifically, they need a next-generation firewall (NGFW) that includes critical risk management capabilities, scalability that extends data-centre protection across all parts of the organization, resiliency for ensured business continuity, as well as automation and orchestration features to reduce the burden on staff while accelerating response times.