A layer 7 firewall that can: Monitor each packet passing through a Firewall individually Block incoming traffic that isn’t a response to outgoing traffic Provide Deep Packet Inspection