¨Keeps track of connections originating from the protected inside network to the outside public network  so that return traffic with connection is allowed ¨All other traffic from the outside public network is blocked by firewall