A network-based firewall is a piece of software running on a single host that can restrict incoming and outgoing network activity for that host only.