For this methodology, the DUT is a cloud network firewall. A firewall is a mechanism used to protect a trusted network from an untrusted network while allowing authorized traffic to pass from one side to the other. Throughout their history, the goal has been to enforce an access control policy between networks and thus should be viewed as an implementation of policy. While the firewall market is one of the largest and most mature security technology segments, cloud network firewalls are relatively new. Firewalls have undergone several stages of development, from early packet filtering and circuit relay firewalls to application layer (proxy-based) and dynamic packet filtering firewalls. This latest evolution virtualizes this functionality to provide scalable and elastic policy enforcement in a cloud environment.