These conditional evaluations are also referred to as 'rules'. When a firewall in constructed, it is set with rules that will be strictly followed by it. For example, if the company policy demands that only the sales department will have the access to the FTP site, the firewall can be set accordingly. So, even if any other department wants to access the site, it will not be possible. In this aspect, Firewalls are to networks what privilege schemes are to operating systems. For example, Windows XP will allow you to specify which users can access a directory or a file. In a similar way, firewalls can provide you with access control to your web sites or network work stations.

Some other features included in firewall are as follows:

a) Virtual Private Networking: - They are also referred to as VPN's. VPN's are used to move the traffic securely from point A to point B over hostile networks. There are many players in the open market offering these services. Many firewall dedicated products offer both LAN-to-LAN and VPN functionalities.

b) Load Balancing: - It's more of a generic term and it refers to the art of moving the traffic in a distributed way. These days, some firewalls products also incorporate certain features like directing FTP traffic and web in a distributed manner.

c) Content filtering: - Companies may want to block their employees from viewing certain websites like: underground sites, pornography sites, and web based emails. Content filtering features in a firewall product allows you to do just that. It blocks all the sites other than the specified ones.

d) Network Address Translation: - They are often used to map illegal address blocks to valid ones. Even though NAT's are not security related, devices that make use of them in corporate world are firewall products.

e) Intrusion Detection: - In general, this term could mean anything. But in this context, some manufacturers are beginning to combine different types of products into their firewall offering. Even though this in itself doesn't create a problem, users have to be a bit weary of the work load that might be imposed on their firewall.

f) Fault tolerance: - Few higher end firewall products developed by companies like Nokia/Checkpoint combination and Cisco PIX support certain kind of fail-over features. Fault tolerance features of firewall products are also referred to as High-Availability functionality. Advanced versions of fault tolerance features allow the firewalls to run in pairs. In this scenario, while one device is functioning, the other will act as a stand by.

Entertaining the thoughts of managing all these features in one single product, can be a daunting task. Hence, one has to approach it with a kitchen sink mentality and with a fair amount of skepticism. Let us not forget that they have a played a pivotal role in various security models of different organizations as well.