What Is a Firewall and What Is Its Role?

In a world where we are constantly connected to the internet, data security has become an absolute necessity for every user and organization. When we talk about protecting a network against external threats, the first and most important term that comes to mind is a firewall.

But what exactly is this system? How does it manage to keep hackers at bay, and why is it considered the foundation of any IT security strategy? Below, you will find everything you need to know about the functioning and importance of this digital guardian.

In this article, you will learn about:

• The basic concept: What is a firewall, and how it acts as a guardian of your network.
• The role and main functionalities: How it repels attacks, how it prevents data leaks and how it limits the lateral movements of hackers.
• The evolution and types of firewalls: From simple packet filters from the 1980s to modern next-generation solutions based on artificial intelligence.
• Short practical tutorial: A quick guide to checking if you have a firewall enabled on your Windows operating system.
• Exclusive video resources: A detailed video made by Horia Munteanu, NewTech Academy trainer.

And if you are interested in exploring more cybersecurity topics, we recommend other resources on the NewTech Academy blog:

Cybersecurity in the Era of AI | The “Zero Trust” Principle in Cybersecurity | What Is an Antivirus and How Does it Work | What Is Phishing and How to Protect yourself

So, What Is a Firewall?

If we were to give a simple definition, a firewall is a set of integrated cybersecurity mechanisms, specifically designed to stop unwanted electronic access to or from a system connected to a network.

To use a short example: imagine an ultra-modern office building. At the entrance, there is a doorman and a turnstile system. Anyone who wants to enter or exit must present a valid ID. If the ID matches the building’s security rules, the person can pass through. If not, access is denied immediately.

This is exactly how a firewall works in the digital world. It represents a barrier between your private (secure) network and the public (not secure) internet. The firewall acts as a virtual gatekeeper: it analyzes all traffic that enters (inbound) and all traffic that leaves (outbound) a network. It checks data packets based on predefined security rules (such as IP address, port, protocol used) and only allows traffic that strictly complies with these rules to pass through.

What Is the Role of a Firewall?

Although many users believe that the main role of a firewall is simply to block hackers from entering the network, its functionality is much more complex and nuanced. Here are the main strategic goals of a firewall:

Rejecting Unwanted Traffic From the Outside

This is the classic role. If an attacker from the Internet tries to scan the ports of a server for vulnerabilities, the firewall can be configured to completely ignore or instantly block these attempts. Therefore, it massively reduces the “attack surface” and limits the opportunities for adversaries to penetrate your system.

Preventing Lateral Movement Within the Network

If a cyber attacker manages, through one method or another (for example, through a phishing attack), to compromise a computer on the network, their first instinct will be to make a “lateral movement”. This means that he will try to jump from the infected computer to other computers or servers on the same network. A well-configured firewall allows for network segmentation. For example, you can separate the area where employees work from the area where critical server databases are stored. Thus, even if one part of the network falls victim to an attack, the firewall isolates the incident and protects the rest of the IT infrastructure.

Data Leakage Protection (Outbound Traffic Control)

A firewall not only looks at who wants to enter, but also who wants to leave. There are malware programs (such as Trojans or spyware) that, once on a computer, try to send sensitive data (passwords, financial documents) to an external server controlled by hackers. The firewall can detect this unusual connection to the outside and block it before your data is stolen.

Intelligent Traffic Filtering and Enforcement of Company Policies

In a corporate environment, a firewall is essential for maintaining productivity and enforcing internal rules. It offers the flexibility to allow or block traffic based on numerous criteria:

• IP addresses and geo-blocking: You can automatically block all traffic originating from certain countries known for frequent cyber attacks.
• Applications: You can block the use of resource-intensive or insecure applications, such as torrent-type files.
• Ports and protocols: You can leave standard web traffic (HTTP and HTTPS) open for browsing the internet, but you can block unused ports to close potential entry points for hackers. Alternatively, you can allow access to a specific application (such as an email server or database) only from physical computers inside the company, prohibiting access from outside.

Sometimes, technology concepts are much easier to understand when they are explained visually, step by step. In this tutorial, Horia Munteanu, a trainer at NewTech Academy, explains in detail what a firewall is, how packet filtering works, how a compromised network can be isolated, and the historical evolution of this critical equipment:

Types of Firewalls

The history of the firewall is closely linked to the history of the evolution of the Internet. Although today it is a standard component, the first networks did not have security measures. The turning point was in 1988, when a NASA employee sent an e-mail to his colleagues with the panic message: “We are currently under attack from an internet virus”. That incident (the famous Morris worm) demonstrated how vulnerable the systems were. In the same year, the first article about a packet filter firewall was published, marking the theoretical birth of this mechanism.

Currently, firewalls can be classified into several categories, depending on how they are implemented and their complexity:

Hardware Firewall

These are dedicated physical equipment (devices similar to internet routers, but much more powerful). They are physically installed between a company’s internal network and the public internet cable. It is an ideal solution for companies, as it protects all the devices behind them, taking over the task of processing traffic.

Software Firewall

These are applications installed directly on the operating system of your computer or server. Their main advantage is that they can precisely control which local programs are allowed to access the Internet. The most common example is the Windows Defender Firewall, integrated into Microsoft operating systems (we will discuss it below, in a short practical tutorial). Often, an effective security strategy combines a hardware firewall at the edge of the network with software firewalls on each individual device.

Generations of Firewalls

Packet Filtering (1st Generation)

They only analyzed basic data (source and destination IP, port). They were fast, but easy to fool by sophisticated attackers.

Stateful Inspection (2nd Generation)

Emerging in the late 90s, they memorized the state of the connection. If a computer inside requested a web page, the firewall would let the response through, but block any unsolicited packets.

Next-Generation Firewalls – NGFW (3rd Generation and Present)

With the 2000s and the rise of sophisticated malware, traditional firewalls were no longer enough. An NGFW doesn’t just look at the IP and port; it also inspects the application type (it knows the difference between YouTube and Skype traffic, even if they use the same port). Furthermore, modern NGFWs use artificial intelligence (AI) and machine learning to detect behavioral anomalies and stop “Zero-Day” attacks (new, previously unknown threats).

How Can You Check if You Have the Firewall Enabled on Windows?

As an individual user, the most important step you can take right now is to make sure your local protection is active. On Windows operating systems, this process is simple and quick.

Here are the steps you need to follow:

1. Press the Windows key on your keyboard (or click the Start button in the lower-left corner of your screen) and type “Windows Security” (or “Securitate Windows” if you have the menu in Romanian). Press Open/Enter to open the application.

2. In the newly opened window, search for and click on the “Firewall & network protection” option in the side menu or in the main panel.

3. Here you will see three different network profiles that Windows uses depending on where you connect:

• Domain network – usually used at work.
• Private network – your home network, which you consider secure.
• Public network – used when you connect to Wi-Fi at a coffee shop or airport.

Next to the network you are actively connected to (marked with the text “active”), you should see the message “Firewall is on” checked. The icon should also have a green checkmark.

4. If under a profile it says that the firewall is off, click on that profile and press the toggle button to switch it to “On”. If the system asks for administrator permissions, press “Yes”.

Congratulations! You have now ensured that your PC’s first line of defense is up and running.

Start Your Career in Cybersecurity!

As you discovered in this article, a firewall is much more than just a barrier; it is an essential strategic tool that separates a vulnerable network from a secure one. As digital threats become increasingly sophisticated, the demand for specialists capable of configuring, monitoring and maintaining these defense systems is at an all-time high.

Are you fascinated by how networks can be defended and do you want to be the one standing on the front line of defense of organizations against cyberattacks?

Turn your passion into a highly sought-after profession on the job market! We are waiting for you to delve deeper into network architectures, firewall configuration and incident monitoring at the IT & SOC (Security Operations Center) course offered by our professionals.👉 Register now and take the first step towards a successful career in the field of digital defense: https://www.newtech.ro/en/courses/it-cyber-security/

Frequently Asked Questions: