It isn’t. Hardware firewall is a dumb firewall that just filters packets, but has no clue what’s going on on a system level. Hardware firewall is only useful if you want to prevent access in or out for specific ports and IP addresses.