* These firewalls operate by tracking the state and context of active connections, maintaining session information such as IP addresses and port numbers. They inspect packets at multiple layers of the OSI model, including the network, transport, and session layers.