Firewalls strengthen network security by monitoring and controlling incoming and outgoing traffic according to defined rules. However, they cannot prevent every attack, especially when threats use permitted connections, originate inside the network, or exploit incorrect configurations.
A firewall is hardware, software, or a combination of both placed between networks or installed on a host. It examines network traffic and applies filtering rules based on information such as IP addresses, port numbers, protocols, connection state, or application data.
For example, a firewall may allow web traffic through ports 80 and 443 while blocking an unauthorized attempt to access a database port. A stateful firewall also tracks active connections, allowing response packets associated with a legitimate request while rejecting unexpected packets.
| Strength | Limitation |
|---|---|
| Blocks unauthorized traffic before it reaches protected systems | Cannot block malicious activity that matches an allowed rule |
| Restricts access to particular ports, protocols, applications, or IP addresses | Poorly designed or outdated rules can create security vulnerabilities |
| Reduces exposure to network-based attacks and automated scans | Does not fully prevent phishing, social engineering, or users downloading malware |
| Logs traffic and blocked connection attempts, supporting monitoring and investigation | Large log volumes require review and may include false positives or false negatives |
| Can separate network segments, limiting movement between them | Internal threats may bypass a perimeter firewall unless internal segmentation is used |
| Provides centralized enforcement of an organization’s network security policy | Encrypted traffic may conceal threats unless suitable inspection is configured |
A common misconception is that a firewall makes a network completely secure. A firewall is only one part of defence in depth and should be combined with authentication, access control, encryption, anti-malware software, intrusion detection or prevention, security updates, and user education.
In an IB Computer Science A2.4 response, distinguish between describing how a firewall works and evaluating its effectiveness. For an evaluation question, give balanced strengths and limitations, explain each one in context, and conclude that effectiveness depends on correct configuration and complementary security controls.
