The Role of Firewalls in Securing Your Network
Every network has a front door. It’s where your devices connect to the internet, and where most attacks begin. A firewall is the lock, the doorman, and the security camera on that door.
It’s also one of the most misunderstood pieces of equipment in a business or home network. Many people assume the basic router their internet provider supplied “has a firewall, so we’re covered.” Sometimes that’s true in a very limited sense. Often it’s not nearly enough.
This guide explains what a firewall does, the main types, how to set one up well, and how it fits with the rest of your defences.
What Is a Firewall?
A firewall is a security system that sits between your network and the outside world, usually the internet. It inspects traffic trying to get in or out and decides whether to allow or block it based on a set of rules.
Think of a building with a front desk. Visitors can’t walk straight to any office. The desk checks who they are, who they’re visiting, and whether they’re expected. A firewall does the same for data.
A firewall can be a dedicated device, a feature built into your router or gateway, or software running on a computer or server.
What a Firewall Actually Protects You From
A good firewall helps you:
Block unwanted connections from the internet, such as automated scans that probe your network for weaknesses
Stop malware from “phoning home.” Many infections need to contact an attacker’s server, and a firewall can cut that off
Keep your internal network separate. You can stop guest Wi-Fi, cameras, and smart devices from reaching your business computers
Control what leaves your network, not just what enters
Create a record of what’s happening, which helps when something goes wrong
The Main Types of Firewalls
You’ll see a few terms. Here’s what they mean in plain language.
1. Packet-filtering firewall. The simplest kind. It checks each piece of data against basic rules (where it came from, where it’s going, and which port it uses). It’s fast but has no memory of earlier traffic, so it can be fooled.
2. Stateful inspection firewall. This is the standard in most routers and gateways today. It tracks ongoing conversations. If your computer asked for a web page, it allows the reply back in. If something arrives that nobody asked for, it blocks it.
3. Proxy (application) firewall. It acts as a middleman and checks request content at the application level. It offers more control but can slow traffic down.
4. Next-generation firewall (NGFW). This adds stateful inspection with extra features such as intrusion detection and prevention (IDS/IPS), application awareness, content filtering, and deep traffic inspection. For most businesses today, this is what “a proper firewall” means.
5. Web application firewall (WAF). A specialized firewall that protects websites and web apps from attacks such as injection attempts. If you host a website or customer portal, this matters.
Hardware or software? Network firewalls protect everything behind them. Software (host-based) firewalls, like the one built into Windows or macOS, protect a single device. Using both is called defence in depth, and it’s a good idea.
What Firewalls Can’t Do
This is where many people get a false sense of security. A firewall is essential, but it doesn’t:
Stop phishing. If an employee clicks a bad link and enters their password, the firewall may see normal web traffic
Protect against stolen passwords. A valid login looks like a legitimate user
Fix unpatched software. Though a good firewall can reduce exposure
Inspect everything. Encrypted traffic is hard to examine, and no firewall catches every threat
Replace backups. If ransomware gets through, you need clean, tested backups to recover
That’s why firewalls work best as one layer in a layered defence. Our guide to understanding ransomware shows how firewalls, backups, and staff training work together.
Common Firewall Mistakes
Most firewall problems come from setup, not from the device itself. These are the ones we see most:
Default settings and passwords. Factory logins are well known to attackers
Overly broad rules. A rule that allows “any traffic to anywhere” defeats the purpose
Leaving remote management open to the internet. Admin panels should never be publicly reachable
Forgotten port forwards. Old rules for a camera or app that’s long gone can leave a door open
Outdated firmware. Firewalls have security flaws too, and updates fix them
A flat network. If everything sits on one network, an attacker who gets into one device can reach them all
No logging or alerts. If nobody ever looks, you won’t know about a problem until it’s serious
“Set it and forget it.” Needs change. Rules should be reviewed regularly
Best Practices for a Stronger Firewall Setup
Start by blocking, then allow only what you need. This is called “default deny”
Segment your network with VLANs: one for staff, one for guests, one for cameras and IoT devices, and one for servers. Our network switch guide explains the equipment that makes this possible
Turn on intrusion detection and prevention if your firewall supports it
Keep firmware up to date, ideally on a schedule
Limit and secure remote access. Use a VPN with multi-factor authentication instead of opening ports
Filter outbound traffic where you can, not just inbound
Review rules and logs regularly, and delete anything you no longer need
Back up your firewall configuration so you can restore it quickly if the device fails
Document your rules so you know why each one exists
Firewalls for Home vs. Business
At home: Your router’s built-in firewall handles the basics. Keep it updated, change the default password, turn off features you don’t use (such as UPnP, where possible), and put smart devices and guests on a separate network.
For a small business: A dedicated business-grade firewall or gateway is worth it. You get better rules, network segmentation, VPN support, and threat detection. If you handle customer, patient, or financial information, a properly configured firewall is part of protecting that data responsibly.
How UniFi Makes Firewalls Easier to Manage
Ubiquiti’s UniFi gateways include a built-in firewall and let you manage it alongside your switches, Wi-Fi, and cameras in one place. Two features are worth knowing about:
Zone-based firewall. Instead of juggling many separate rules for every VLAN and device, you group devices and services into zones such as Internal, External, and VPN, then set policies between zones. That means fewer rules and fewer chances for a mistake.
Intrusion detection and prevention. UniFi gateways can monitor traffic for known attack patterns and either alert you or automatically block them. UniFi also offers an optional paid subscription, CyberSecure, that adds a larger, regularly updated library of threat signatures and, on supported setups, enhanced content filtering. Available features depend on the gateway model and software version.
Because these tools sit in the same dashboard as the rest of your network, it’s easier to see what’s connected and what’s allowed to talk to what.
How ESG IT Consulting Helps
A firewall is only as good as its configuration. ESG IT Consulting helps homes and businesses get it right:
Firewall and network assessment. We review your current setup and find the gaps attackers look for
Design and installation. We choose equipment that fits your size and budget, including UniFi gateways, and set it up properly from day one
Network segmentation. We separate staff, guests, cameras, and servers so a problem in one area doesn’t spread
Secure remote access. VPN and multi-factor authentication done properly, so you don’t have to open risky ports
Monitoring and maintenance. Firmware updates, rule reviews, and log checks, so your protection doesn’t quietly go stale
A complete safety net. We pair your firewall with tested backups, including Veeam, so you’re protected before an attack and can recover quickly after one
We explain everything in plain language, so you’ll always know what’s protecting you.
Key Takeaways
A firewall filters traffic between your network and the internet, and it’s the first layer of your defence
Stateful firewalls are the baseline; next-generation firewalls add threat detection and deeper inspection
Firewalls don’t stop phishing, stolen passwords, or unpatched software, so they work best alongside other layers
Most firewall failures come from poor configuration: default settings, broad rules, outdated firmware, and no monitoring
Segmenting your network limits the damage if something gets in
A professionally configured firewall, plus tested backups, gives you the strongest protection
Is Your Firewall Really Protecting You?
If you’re not sure what your firewall is blocking, who can reach your network from the outside, or when it was last updated, it’s worth finding out. Contact ESG IT Consulting for a firewall and network security review. We’ll show you where you stand and what to fix first.
Comments