The CEQURUX Firewall intercepts data directly from the network interface card. A Service Switch decides whether to pass it on to the high-performance Contextual Gateway or call one of the application proxies or services. The Contextual Gateway maintains a stateful table of sessions, fast-tracking data that matches a previously approved service. Incoming requests for service are authenticated by the Authentication Manager, and routed to the appropriate application proxy or onboard service.