Only intranet host accessible from the outside network
Control all incoming traffic to and outgoing traffic from a protected network
Filter packets on the basis of their IP addresses
Enable internal users to use services like TELNET or FTP
Commercial firewalls
Provide application-level filters that watch for such things as viruses or Java applets