Layer 4
While the exact meaning of the term Layer-4 switch is vendor dependent, it almost always starts with a capability for network address translation, but then adds some type of load distribution based on TCP sessions.The device may include a stateful firewall, a VPN concentrator, or be an IPSec security gateway.