Detecting and blocking attacks that attempt to exploit vulnerabilities in network services or applications.

Inspecting incoming and outgoing traffic at the application layer.

Analyzing the context of each packet to determine whether it is part of an established connection or a new connection attempt.

Examining each packet that attempts to enter or exit a network and deciding whether to allow or block it based on predefined rules.