A firewall technology that monitors the state of active network connections to filter traffic based on context and protocol compliance. This ensures that only legitimate, requested communication can enter sensitive thermal plant control networks.