A traditional firewall is designed to police traffic going in and out of your network based on destination IP address, port, protocol and source IP address.