Service control determines the types of internet services that can be accessed, inbound or outbound. Behavior control controls how particular services are used.
Direction control determines the direction in which particular service requests may be initiated and allowed to flow through the firewall and user control controls access to a service according to which user is attempting to access it.