In terms of computer security, a firewall is a piece of software.
This software monitors the network traffic between the inside and outside. The firewall is placed between the network that is to be protected (trusted) and the outside network (less trusted) aka WAN or Internet. A firewall has a set of rules which are applied to each packet. The rules decide if a packet can pass, or whether it is discarded. When a large network needs to be protected, the firewall software often runs on a computer that does nothing else.
A firewall protects one part of the network against unauthorized access.
Data travels on the internet in small pieces; these are called packets. Each packet has certain metadata attached, like where it is coming from, and where it should be sent to. The easiest thing to do is to look at the metadata. Based on rules, certain packets are then dropped or rejected. It is done at the network layer.
In addition to the simple packet filtering (above), this kind of firewall also keeps track of connections. A packet can be the start of a new connection, or it can be part of an existing connection. If it is neither of the two, it is probably useless and can be dropped.
Application-layer firewalls do not just look at the metadata; they also look at the actual data transported. They know how certain protocols work, for example FTP or HTTP. They can then look if the data that is in the packet is valid (for that protocol). If it is not, it can be dropped.
Firewalls can provide a secure connection between two networks. This is called tunnellng. The data may be encrypted. It is decrypted at the other end. Since the firewalls are doing this, the rest of the network is unaware of it. An alternative is to provide a secure access (to the corporate network).
Very often, firewalls can translate IP addresses. That way, many computers can share a few public IP addresses. The firewall translates between the public and the private IP addresses.
In general, there are two types of firewalls:
Prominent Brands include OPNsense, pfsense, comodo etc.
Prominent Brands include PaloAlto, WiJungle, Checkpoint, Cisco etc.
Firewalls can protect against some problems (viruses and attacks) that come from the internet. They cannot protect against viruses, that come from infected media (like an infected office document on an USB flash drive).
This article uses material from the Wikipedia Simple English article Firewall (networking), which is released under the Creative Commons Attribution-ShareAlike 3.0 license ("CC BY-SA 3.0"); additional terms may apply (view authors). Content is available under CC BY-SA 4.0 unless otherwise noted. Images, videos and audio are available under their respective licenses.
®Wikipedia is a registered trademark of the Wiki Foundation, Inc. Wiki Simple English (DUHOCTRUNGQUOC.VN) is an independent company and has no affiliation with Wiki Foundation.