Firewalls operating at the application layer (layer 7) have the ability to inspect the content of the messages. They analyze data such as URLs, application data, and the payload within HTTP requests. In contrast, firewalls at the transport layer (layer 4) base their filtering decisions on network and transport layer information such as IP addresses, TCP/UDP ports, and session initiation/termination.