> monitor applications connections , block outbound connections > to unwanted services (block chat, p2p...)