Firewall (computing)

A firewall is like a digital wall.

It helps keep computers safe. It watches things moving on the internet.

The wall checks data coming in and out. It uses special rules to make choices. These rules tell the wall what to allow.

Some firewalls sit between large networks. Others live on a single computer. They act like a guard for your data.

It can stop things that should not pass. This keeps the private parts of a network safe. It is a very smart way to stay safe.

A firewall is a tool for network security. It acts like a guard for computer data.

It watches data moving in and out of a network. It uses security rules to make choices. These rules tell the firewall what to allow or block.

There are two main types of firewalls. A network-based firewall sits between two networks. It controls data moving between them. A host-based firewall lives on a single computer. It protects that one device.

Firewalls check small bits of data called packets.

A packet must match a rule to pass through. The firewall looks at many things to decide. It checks where the data comes from. It checks where the data is going. It can even check the type of data.

Some firewalls are very smart. They use User ID to know who is connecting. This means rules can be made for specific people. For example, a school can block social media for students. The firewall checks the user's identity to make this work. This keeps the network safe and organized.

A firewall is a helpful system used for network security. It works by watching and controlling the data moving in and out of a network.

This system uses special security rules to make important decisions. It creates a barrier between a trusted network and an untrusted one, like the Internet. Without this barrier, data could move freely without any checks. This helps keep private information safe from things that should not be there. By using these rules, a firewall acts like a smart gatekeeper for digital information.

There are two main ways a firewall works. A network-based firewall sits between two or more networks to control the flow of data. These can be software, hardware, or even virtual tools.

A host-based firewall is different because it lives directly on a single computer. It can be a service inside the operating system or a special application. The first type of network firewall is called a packet filter. It looks at small bits of data called packets. The firewall uses an access-control list to decide what to do with each packet. It might let a packet pass, or it might silently discard it.

People have been working on this technology for a long time. The term "firewall" used to mean a real wall built to stop a fire from spreading between buildings. In the 1980s, people started using the word for new computer networks. Before this, routers were used to help separate networks. In 1987, engineers from Digital Equipment Corporation published the first paper on this technology. Later, researchers at AT&T Bell Labs also worked on improving how packets are filtered. These early steps helped create the strong security we use today.

Many important inventions helped firewalls grow. In 1994, a company called Network Translation Inc. made the PIX Firewall.

It was a very successful product that helped organizations connect to the Internet safely. In 1995, a large company called Cisco Systems bought the rights to this technology. By 2005, the PIX was succeeded by a new platform called the Adaptive Security Appliance. Other researchers, like Marcus Ranum, helped create application firewalls in 1993. These newer tools can understand specific applications like web browsers or email. This makes the security even more detailed and helpful.

Modern firewalls can be very smart by using User ID. Instead of just looking at a computer's address, they look at who is using it.

This works by connecting to a directory service, like Active Directory. For example, a school might want to stop students from using social media. The firewall identifies the student through their login. It then follows a rule to block that specific person from certain sites. This is similar to how a teacher might give different permissions to different groups of students. It makes sure everyone follows the rules of the network.

In computing, a firewall is a network security system. It monitors and controls incoming and outgoing network traffic based on specific security rules. A firewall establishes a barrier between a trusted network and an untrusted network, such as the Internet.

This barrier protects private data by regulating how information moves across network boundaries. By using configurable rules, firewalls act as intelligent gatekeepers for digital communication.

Firewalls operate using specific policies known as firewall rules. These rules evaluate network packets, which are small units of data that travel across networks. To make a decision, the firewall checks various attributes of each packet. These attributes include the direction of traffic, the source IP address, and the destination IP address. The firewall also examines the port number, which identifies specific services, and the protocol used for communication. Based on these criteria, the firewall takes an action: it may allow the packet, deny it, drop it, or require further inspection.

There are two primary categories of firewalls: network-based and host-based. A network-based firewall is positioned between two or more networks, such as a local area network (LAN) and a wide area network (WAN). These can be hardware appliances, software running on general hardware, or virtual appliances managed by a hypervisor.

In contrast, a host-based firewall is deployed directly on a single host. It functions as a service within the operating system or as a dedicated agent application to protect that specific device.

Firewall technology has evolved through several distinct generations. The first generation consists of packet filters. These inspect individual packets using an access-control list to decide whether to forward them or silently discard them. The second generation, developed between 1989 and 1990 by researchers at AT&T Bell Laboratories, includes circuit-level gateways. These gateways maintain knowledge of specific conversations by remembering port numbers at the transport layer of the OSI model. The third generation involves application layer firewalls. These can understand specific protocols like HTTP or FTP to detect if a service is being abused.

Modern next-generation firewalls provide even deeper inspection capabilities. They can perform web filtering, intrusion prevention, and user identity management. They also use heuristic analysis and content inspection to protect networks. Some firewalls focus on the application layer by using socket filters. These filters hook into socket calls to examine the connection between the application layer and lower network layers. This allows the system to determine if a specific process should be permitted to accept a connection.

History shows how the concept of the firewall moved from physical structures to digital ones. Originally, a firewall was a physical wall designed to contain a fire within a building. The term was applied to computing in the 1980s as the Internet grew. Before modern firewalls, routers were used to segregate networks and filter packets. In 1987, engineers from Digital Equipment Corporation published the first paper on packet filter firewalls. Later, in 1994, Network Translation Inc. created the PIX Firewall. This product helped organizations manage the depletion of IPv4 addresses by connecting private networks to the public internet securely. Cisco Systems acquired the PIX technology in 1995, and it eventually became the Adaptive Security Appliance in 2005.

Advanced security is often managed through the use of zones and User ID technology. Administrators partition networks into logical segments called zones, such as "Public," "Private," or "DMZ." Each zone has its own level of trust and specific rules. Furthermore, modern firewalls use User ID to move beyond simple IP address filtering. By integrating with directory services like Active Directory or LDAP, the firewall can link network activity to specific individuals. For example, a school could use a rule to deny the "Students" user group access to social media while allowing other groups to proceed. This provides granular control that remains effective even when users move between different devices and locations.