CyberGlossary

Network Security

Firewall

Also known as: Network firewall

Definition

A network security device or software that monitors and controls inbound and outbound traffic based on a defined ruleset, separating trusted from untrusted networks.

A firewall enforces an access-control policy at a network boundary by inspecting packets and either allowing, denying, or logging them according to rules that typically reference source and destination IP addresses, ports, and protocols. Firewalls range from simple packet filters on routers to dedicated appliances and host-based software, and they are the foundational perimeter control in defence-in-depth architectures. Modern deployments combine firewalls with NAT, VPN termination, IDS/IPS, and application awareness. Effective use requires least-privilege rulebases, regular review, change management, logging, and integration with monitoring tools to detect policy drift, shadowed rules, and lateral movement.

Examples

  • A pfSense appliance blocking inbound SMB (TCP/445) from the internet.
  • An AWS security group permitting only HTTPS from the load balancer to an application server.

Related terms