• An appliance by security vendors (cisco,etc.)
• NVA can also be a windows server with required roles and routes defined in it
• They control traffic flow
• Used in conjunction with Custom routes
  • so for example, all incoming public traffic goes to a dmz subnet where you have NVA availability set.

references: