These firewalls act as a gateway between the end user requesting data and that data source. The host device connects to the proxy, and the proxy establishes a separate connection to the data source. In response, the source device connects to the proxy and the proxy establishes a separate connection to the host device. Before forwarding the packet to its destination address, the proxy can filter the packet to enforce policy and mask the recipient's device location while protecting the recipient's device and network.
The nice thing about proxy-based firewalls is that they can only collect limited information about your network because computers outside the protected network are not directly connected to the network.
The main disadvantage of proxy-based firewalls is that in addition to terminating incoming connections and making outgoing connections, filtering introduces delays that can degrade performance. Conversely, the response time is very slow, so you don't have to use some applications on your firewall.
