Its primary purpose is to monitor and filter incoming and outgoing network traffic based on predetermined security rules.