# Firewall VS EDR | Key Differences

Firewall

* Purpose: Protects the network perimeter by filtering traffic.
    
* Features: Packet filtering, VPN support, NAT functionality.
    
* Use Case: Blocks external threats and manages network resources.
    
* Limitations: Limited visibility into encrypted traffic and internal threats.
    

EDR

* Purpose: Monitors and responds to endpoint threats in real-time.
    
* Features: Behavioral analysis, threat hunting, automated response.
    
* Use Case: Detects advanced malware and supports incident remediation.
    
* Limitations: Resource-intensive and high alert volume.
    

---

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1736419921328/d950bd68-12ed-49d1-a9a2-c26a22a3e1a0.jpeg align="center")