These deployments are characterized by Gatekeeper server(s) being placed just in front of the protected servers. The main purpose of these deployments is to leverage fine-tuned policies that regular firewalls would struggle to enforce.