For a firewall to control traffic between two networks, the traffic must pass through that firewall.

### Why this is right A firewall can only examine and apply rules to traffic that reaches it. Traffic that takes a path around the firewall is outside its direct control. ### The concept A firewall is placed in the path of traffic it is expected to control. It examines information such as source, destination, service, interface, zone, and connection state, then applies the matching rule. Network design and routing therefore determine whether traffic actually encounters the firewall. ### The other options - **False**: this would imply the firewall can filter traffic that never passes through it, which the material explicitly rejects. ### Terms - **Security policy**: A set of rules that determines whether traffic is allowed or denied. ### Remember No path through the firewall means no firewall inspection of that traffic.