Which Azure resource acts as a basic firewall, allowing or denying traffic based on IP address and port rules?