If the traffic from an IP address is trustworthy, the IP address can be added to the whitelist. Then, the FW directly forwards the packets from the IP address without implementing the blacklist checks, content filtering, and DDoS checks.