The GFW generally works on the TCP layer, resetting the session which delivers some sensitive-keyword-containing payloads, both in and out of the boundary.