From a connectivity standpoint, these devices represent the entry and exit points of an organization. All traffic generated by network clients is observed and filtered by the firewall. The primary role of the firewall is to control this flow and only allow known traffic by creating a complex set of granular rules. This process is also known as network segmentation, but it represents only the classical functioning of firewalls.