An organization needs to protect its internal network from unauthorized access. They decide to deploy a security device that examines the headers of incoming and outgoing packets, maintaining information about the state of active connections. This device decides whether to allow or block traffic based on a predefined set of rules and the connection's state.