Circuit Level Gateway

• Security function (implements policy) determines which connections will be allowed

• Used where internal users are trusted for all outbound services

• Often combined with a proxy for inbound services