Also referred to as dynamic packet filtering. A firewall architecture that works at the network layer. Stateful inspection checks both the header information and contents of the packet. As an added security measure against port scanning, stateful inspection firewalls close off ports until connection to the specific port is requested.