Firewall (computing)

Edit · View history

Firewall (computing)

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, such as the Internet. Firewalls can be implemented as hardware appliances, software programs, or a combination of both.

The primary purpose of a firewall is to prevent unauthorized access while permitting legitimate communications. Firewalls are a fundamental component of network security, often used in conjunction with other security tools like intrusion detection systems and antivirus software.

Features

Firewalls typically offer a range of features, including:

• Packet filtering – inspecting each packet's headers (source/destination IP, port, protocol) and allowing or blocking based on rules.
• Stateful inspection – tracking the state of active connections and making decisions based on the context of traffic.
• Application-layer filtering – examining the content of data packets at the application layer (e.g., blocking specific web sites or protocols).
• Proxy service – acting as an intermediary for requests from clients seeking resources from other servers.
• Logging and auditing – recording traffic events for analysis and compliance.
• Virtual private network (VPN) support – enabling secure remote access through encrypted tunnels.

History

The concept of a firewall evolved in the late 1980s as the Internet expanded. Early firewalls were simple packet filters based on router access control lists. In 1988, the first commercial firewall product, the DEC SEAL (Secure External Access Link), was released by Digital Equipment Corporation.

In the early 1990s, stateful inspection firewalls were developed to improve security by analyzing packet contents and connection states. The first generation of stateful inspection firewalls included products from companies like Check Point Software Technologies.

The late 1990s and early 2000s saw the rise of next-generation firewalls (NGFWs) that integrated deep packet inspection, application awareness, and intrusion prevention capabilities. Modern firewalls often incorporate cloud-based threat intelligence and can be deployed as virtual appliances in virtualized environments.

Firewalls continue to evolve with the adoption of zero-trust architectures and software-defined networking, where security policies are enforced at a granular level regardless of network perimeter.