


Once connected, the proxy makes all packet-forwarding decisions. This creates two connections: one between the client and the proxy server and one between the proxy server and the destination. In effect, the proxy establishes the connection with the destination behind the firewall and acts on behalf of the client, hiding and protecting individual computers on the network behind the firewall. The client then negotiates with the proxy server in order to communicate with the destination service. When a client program establishes a connection to a destination service, it connects to an application gateway, or proxy. Also known as application proxy or application-level proxy, an application gateway is an application program that runs on a firewall system between two networks.
