Key takeaway
Inventory gateways, review routes and exposed management services, and assign an owner to each device.
What a gateway does
A gateway forwards packets between networks and may combine routing, address translation or protocol conversion. In a home network, a router often serves as the default gateway. The term describes a role in traffic flow, not necessarily a separate device type.
How it differs from a router, switch and firewall
One appliance can combine roles, but the functions remain distinct. Document the control applied at each boundary.
| Role | Main function | Boundary |
|---|---|---|
| Layer-2 switch | Forwards local frames | Layer-3 models may also route |
| Router | Selects the IP next hop | Does not guarantee traffic inspection |
| Default gateway | Fallback next hop without a more-specific route | Need not translate protocols |
| Firewall | Enforces traffic policy | Features depend on implementation |
Gateway types and placement
A default gateway is used to reach other IP networks when no more-specific route applies. Application and API gateways can route requests to services and centralize authentication or policy checks; a security gateway adds traffic controls. Product labels vary, so document the actual function and trust boundary in the architecture.
Secure gateways with a Zero Trust approach
Keep management interfaces off the public internet, apply updates, protect administrator accounts and disable unnecessary services. Minimize access rules by source, destination, port and business need; centralize logs and review changes. Being inside the network does not make a user or device automatically trusted, so verify access to each resource.