01 · Start here
A firewall is part of the packet path
A firewall controls traffic according to security policy and often performs state tracking, NAT, routing and inspection. It is not simply a router with an extra checkbox.
Source zone
→Firewall
→Destination zone
Engineer takeaway
Treat the firewall as an active decision point in the flow.