When a packet is flowing through the security gateway, which one of the following is a valid inspection path?