A traditional firewall primarily makes decisions using addresses, ports, protocols, and connection _____.

### Why this is right Connection state indicates whether traffic belongs to an active connection. The lesson lists it alongside addresses, ports, and protocols as a traditional firewall decision input. ### The concept Traditional firewalls focus on packet and connection information. A next-generation firewall can add application, user, and threat awareness. Connection state is also the basis of stateful inspection, where the firewall remembers active sessions rather than treating every packet as unrelated. ### Terms - **Stateful inspection**: Firewall inspection that tracks active connections and uses their context. ### Remember Traditional inspection uses network details and connection state; next-generation inspection can add higher-level awareness.