A Application Layer Firewall. It validates UDP and TCP sessions to allow or disallow certain traffic.