What is suspicious user/traffic in Server Side exclude

Hi,

What is suspicious user/traffic in Server Side exclude? How it is different from Firewall Level? If a user is blocked based on Firewall level, It wont reach the page. Why would be need to hide anything from that suspicious user?