StudyToCert

All certifications / Security+ / Lessons

CompTIA Security+ SY0-701 · Domain 3: Security architecture

Firewalls (L4/L7, NGFW), WAF, UTM

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

A firewall enforces rules about which network traffic may pass between zones, such as between the internet and an internal network or between internal segments. Firewalls differ mainly in how deeply they look at traffic, and Security+ tests whether you can match the right type to a threat. The layer numbers refer to the OSI model: a Layer 4 firewall decides using addresses, protocols and ports, while a Layer 7 firewall understands the application data itself. Choosing correctly means knowing what each can see and what it cannot.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security+ study plan