1. traffic flow inspection to stop exploits using signature-based detection.
2. Block known bad URLs and monitor fully qualified domain names