Bidirectional Stateful Firewall • Decreases the attack surface of physical, cloud, and virtual servers with fine-grained filtering, design policies per network, and location awareness for all IP-based protocols and frame types • Centrally manages server firewall policy, including templates for common server types • Prevents denial of service attacks and detects reconnaissance scans