Application Level Gateway

• If proxy code for application is not supported, no forwarding of packets

• Can examine the packets to ensure the security of the application – full packet awareness

• Very easy to log since entire packet seen

• Disadvantage: additional processing overhead for each connection – increase load