Match the following item with its corresponding description.

A separate network located outside the organization's internal information system that permits controlled access from the Internet.

Special purpose devices designed to read the source and destination address fields in IP packet headers to decide where to send $($route$)$ the packet next.

A network security system or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

A device that connects an organization's information system to the Internet.