A computer which provides security by serving as a gateway between an internal network and external systems. All outside traffic attempting to connect to the internal network is routed through the bastion host, which defends against potential attacks by intercepting and screening incoming packets. The bastion host may be part of a larger security system providing multiple layers of protection.