His software uses sophisticated packet inspection and statistical modeling techniques to take snapshots of what moves across the continually changing network of PCs.
The problem is that traditional firewall software, like the kind sold by Check Point, Juniper and Cisco, relies on something called stateful inspection.