How does a firewall inspect packets?

In the previous section, we discussed the basics of the TCP/IP model. If we look closely, the source IP address is a part of the IP packet and source/destination ports are a part of the TCP packets.

For the purpose of understanding, I have captured the TCP 3-way handshake with the help of a TCP dump.