# Advanced traffic inspection

The Firewall’s traffic inspection process is designed to ensure a high level of security and throughput. The Firewalls’ policies determine when to use stateful connection tracking, packet filtering, or application-level security.

The Firewall uses the resources necessary for application-level security only when the situation demands it, and without unnecessarily slowing or limiting network traffic.

Some types of connections can be selected for inspection of the data content against harmful or otherwise unwanted patterns in connections. The deep packet inspection features provide IPS-type capabilities right on the Firewall, and help in finding and stopping malicious or suspicious network activities. You can even inspect the content of encrypted HTTPS connections using the built-in deep packet inspection features.

An anti-malware scanner and a sandbox complement the standard traffic inspection features.