Firewalls, VPNs, proxies: what each one really filters

These three mechanisms are often lumped together because all can sit 'in the middle'. Their jobs differ. A firewall enforces traffic policy, a proxy relays application-level or other traffic on behalf of a client, and a VPN creates an encrypted tunnel between endpoints or networks. Understanding what information each can see is the key.