A network administrator is comparing firewall types for a company perimeter. She wants a firewall that inspects packets in the context of active sessions, tracking whether a packet is part of an established connection before allowing it through, rather than evaluating each packet in isolation. Which firewall type best meets this requirement?