A firewall capability that verifies network conversations follow expected protocol sequences, such as the TCP three-way handshake.
Want to actually apply concepts like this instead of just reading definitions?