What is a firewall? Stay protected with ESET personal firewall |

Firewall protection 3 min read 3 min read In computer networks, firewalls block or allow network traffic, based on a set of predefined or dynamic rules and policies. They protect networks and computers against intrusion from potentially dangerous black-hats as well as from attacks that might enable them to take over the devices and misuse them for malicious purposes. Get protected [#get-protected] What is firewall? The term “firewall” originally referred to a structure that is supposed to confine fire within a closed space, thus hampering its spread and mitigating its harmful effects on humans and property. By analogy, in network security a firewall is a software- or hardware-based system that works as a gatekeeper between trusted and untrusted networks or its parts. It achieves this by filtering out harmful or potentially unwanted content and communication. Read more Network firewalls usually fulfil this function for internal systems comprising several devices or sub-networks. This type of firewall runs on network hardware and can be easily scaled to fit businesses of any size. Host-based firewalls run directly on the user machines (or endpoints) and therefore can offer far more personalized filtering rules. Most operating systems provide their own built-in host-based firewall. However, these tend to feature only basic functionality and, as widespread as they are, have probably been investigated thoroughly by the potential attackers. The first commercial firewalls designed for computer networks were developed in the late 1980s by Digital Equipment Corporation (DEC). The technology gained prominence and became widespread over the following decade due to rapid growth of the global internet. Spread the word and share online How do firewalls work? There are multiple types of firewalls, each using a different approach to traffic filtering. First generation firewalls worked as packet filters, comparing basic information such as original source and destination of the packet, the port being used, or the protocol against a predefined list of rules. Second generation comprised the so-called stateful firewalls , which added another parameter to the filter setup, namely connection state . Based on this information, the technology could determine if the packet was starting the connection, was a part of an existing connection or wasn’t involved at all. Third generation firewalls were built to filter information across all layers of the OSI model – including the application layer – allowing them to recognize and understand applications as well as some of the widely-used protocols such as File Transfer Protocol (FTP) and Hypertext Transfer Protocol (HTTP). Based on this information, the firewall can detect attacks trying to circumvent it via an allowed port or misuse of a protocol. The latest firewalls still belong to the third generation, however they are often described as “next-generation” (or NGFW) . They combine all the previously used approaches with deeper inspection of the filtered content, e.g. matching it against a detection database to identify potentially harmful traffic. These modern firewalls often come with additional security systems built into them such as virtual private networks (VPN), intrusion prevention and detection systems (IPS/IDS), identity management, application control and web-filtering. Third generation firewalls were built to filter information across all layers of the OSI model – including the application layer – allowing them to recognize and understand applications as well as some of the widely-used protocols such as File Transfer Protocol (FTP) and Hypertext Transfer Protocol (HTTP). Based on this information, the firewall can detect attacks trying to circumvent it via an allowed port or misuse of a protocol. The latest firewalls still belong to the third generation, however they are often described as “next-generation” (or NGFW) . They combine all the previously used approaches with deeper inspection of the filtered content, e.g. matching it against a detection database to identify potentially harmful traffic. Read more These modern firewalls often come with additional security systems built into them such as virtual private networks (VPN), intrusion prevention and detection systems (IPS/IDS), identity management, application control and web-filtering. Get protected What are the benefits of using a firewall? The biggest benefit for users is enhanced security . By using a firewall you set up a security perimeter that can help to protect your computer or network from harmful incoming traffic. This technology can also filter harmful outgoing traffic . By doing this it lowers the chance of undetected data exfiltration by a malicious insider as well as reduces the risk that the devices behind the firewall will become a part of a botnet - a large group of internet-connected devices enslaved by the attackers for malevolent purposes. Read more Firewalls are especially beneficial for companies with networks consisting of several internet-connected endpoints. If the firewall is properly set up at the edge of such network, it creates a single point of entry where some of the incoming threats can be identified and mitigated. It also separates the company’s internal systems from the public internet, and thus creates a protected environment where data can flow more freely and more securely. ESET offers you a firewall feature ESET Smart Security Premium Built without compromise for users who want it all. Secures Windows, macOS and Android devices. Buy now Try For Free Ultimate digital security for business Protect your company endpoints, business data and users with ESET's multilayered technology. Ultimate digital security for business Protect your company endpoints, business data and users with ESET's multilayered technology. Explore solutions Explore solutions Related topics Phishing Cryptominers Antivirus Identity Theft Ransomware Spam Trojan Horse Malware Want to know more? Follow us for all the latest tips and news Follow us for all the latest tips and news ESET Cart United States Menu ESET North America San Diego, California More contacts United States (EN) For home All products for home Windows products macOS products Android products USB security Online scanner Licensing for home Student discounts Hero discounts Refer ESET and earn Downloads for home Download free trial I have a license For business Small business Mid-size business Enterprise All products for business Services for business Licensing for business Customer Stories Contact Sales Downloads for business Request business trial I have a license Partnership Partner with ESET Reseller Program MSP Program Technology Alliance Business development Affiliate program Support Existing customers My Account Renew a product Support for home Support for business Security Forum About ESET About us ESET during COVID-19 Newsroom Technology Corporate Blog Careers Events For home All products for home Windows products macOS products Android products USB security Online scanner Licensing for home Student discounts Hero discounts Refer ESET and earn Downloads for home Download free trial I have a license For business Small business Mid-size business Enterprise All products for business Services for business Licensing for business Customer Stories Contact Sales Downloads for business Request business trial I have a license Partnership Partner with ESET Reseller Program MSP Program Technology Alliance Business development Affiliate program Support Existing customers My Account Renew a product Support for home Support for business Security Forum About ESET About us ESET during COVID-19 Newsroom Technology Corporate Blog Careers Events ESET North America San Diego, California More contacts United States (EN) Contact Privacy Cookie Settings Legal information Report vulnerabilities Sitemap © 2008-2022 ESET North America. All rights reserved. Trademarks used herein are trademarks or registered trademarks of ESET spol. s r.o. or ESET North America. All other names and brands are registered trademarks of their respective companies. v3.47.0.687510.pro.azne.mas