Method for data packets inspection via a device comprising a first communication interface adapted to be connected to a first network and a second communication interface adapted to be connected to a second network, the method comprising: - receiving through said first communication interface one or more data packets which may comprise an access request of a first host connected to said first network to a resource managed by a second host connected to said second network; - analyzing said one or more data packets received through said first communication interface for detecting said access request, and in case said access request is detected: a) analyzing said access request for determining the respective requested resource, b) determining whether said requested resource is blocked or permitted, wherein said determining whether said requested resource is blocked or permitted comprises at least one of: - verifying whether said requested resource is stored in one or more lists stored within said device, and - sending a verification request (REQ_URL) to a policy server and receiving a respective verification response (RSP_URL) from said policy server, and c) in case said requested resource is blocked, identifying the status of the response to said access request as blocked, and d) in case said requested resource is permitted, identifying the status of the response to said access request as permitted; - sending, in parallel to said analysing, said access request to said second communication interface; - receiving through said second communication interface one or more data packets which may comprise a response of said second host to said access request of said first host; - analyzing said one or more data packets received through said second communication interface for detecting said response, and in case said response is detected: a) verifying the status of the response for determining whether said response is blocked or permitted, b) in case said response is blocked (DROP), inhibiting (1020-1026; 2014-2024) the forwarding of at least a part of said response to said first communication interface, and c) in case said response is permitted (ACCEPT), forwarding said response to said first communication interface. - receiving through said first communication interface one or more data packets which may comprise an access request of a first host connected to said first network to a resource managed by a second host connected to said second network; - analyzing said one or more data packets received through said first communication interface for detecting said access request, and in case said access request is detected: a) analyzing said access request for determining the respective requested resource, b) determining whether said requested resource is blocked or permitted, wherein said determining whether said requested resource is blocked or permitted comprises at least one of: - verifying whether said requested resource is stored in one or more lists stored within said device, and - sending a verification request (REQ_URL) to a policy server and receiving a respective verification response (RSP_URL) from said policy server, and c) in case said requested resource is blocked, identifying the status of the response to said access request as blocked, and d) in case said requested resource is permitted, identifying the status of the response to said access request as permitted; a) analyzing said access request for determining the respective requested resource, b) determining whether said requested resource is blocked or permitted, wherein said determining whether said requested resource is blocked or permitted comprises at least one of: - verifying whether said requested resource is stored in one or more lists stored within said device, and - sending a verification request (REQ_URL) to a policy server and receiving a respective verification response (RSP_URL) from said policy server, and - verifying whether said requested resource is stored in one or more lists stored within said device, and - sending a verification request (REQ_URL) to a policy server and receiving a respective verification response (RSP_URL) from said policy server, and c) in case said requested resource is blocked, identifying the status of the response to said access request as blocked, and d) in case said requested resource is permitted, identifying the status of the response to said access request as permitted; - sending, in parallel to said analysing, said access request to said second communication interface; - receiving through said second communication interface one or more data packets which may comprise a response of said second host to said access request of said first host; - analyzing said one or more data packets received through said second communication interface for detecting said response, and in case said response is detected: a) verifying the status of the response for determining whether said response is blocked or permitted, b) in case said response is blocked (DROP), inhibiting (1020-1026; 2014-2024) the forwarding of at least a part of said response to said first communication interface, and c) in case said response is permitted (ACCEPT), forwarding said response to said first communication interface. a) verifying the status of the response for determining whether said response is blocked or permitted, b) in case said response is blocked (DROP), inhibiting (1020-1026; 2014-2024) the forwarding of at least a part of said response to said first communication interface, and c) in case said response is permitted (ACCEPT), forwarding said response to said first communication interface.