L7 firewalls will have the ability to inspect the the payload data of a packet. Typically they are application specific. For example Cisco has its AVS product that can act as a HTTP(s) firewall. With this, you can protect against SSN, CC, driver's license #, etc information based on firewall rules.