A firewall is a system that prevents unauthorized access to a company's computer network from the outside. It monitors data flowing in and out and intercepts unjust access. A bastion host is a specially hardened computer located in the DMZ or outside the firewall that hosts a single application like a proxy server and has all other services removed or limited. A proxy server acts as an intermediary for requests from clients to external servers by evaluating requests according to filtering rules and optionally altering requests or responses.