A network security system that monitors and tracks the state of active network connections in both directions to dynamically allow or block traffic. In industrial plants, it ensures only authorized, context-aware communications pass between different network levels.