The firewall can identify not only the protocols in use but also the applications running on them. Many protocols, such as HTTP, can transport numerous applications. A firewall can analyze network streams at Layer 4 to determine the content being delivered at Layer 7.
A screenshot displays what a user might see when an application has been blocked.