Using a single, unified packet-filtering engine, all net traffic is processed and then forwarded or blocked from a single point of control.

• 利用单一、统一的包过滤引擎，所有的网络信息流都从一个控制点进行处理，然后被向前发送或阻断。