A firewall is indeed a preventive control. Its primary function is to prevent unauthorized access to or from a private network. It can be set up to allow outbound traffic from within the network while blocking inbound traffic from untrusted sources or not matching the defined security rules. This effectively prevents certain types of network-based attacks and unauthorized access, aligning with the characteristics of preventive controls.