It can run a firewall and forward to internal traffic as well.