The firewalls are stateful, with connection tracking.