Which type of firewall operates at the Network layer of the OSI model and can filter data by port, interface address, source address, and destination address?

A caching proxy operates at the Application layer and is focused on storing and serving cached web content, not on filtering packets by address or port at the Network layer.

A packet filtering firewall inspects each packet's header at the Network layer and applies stateless rules based on source IP address, destination IP address, source/destination port numbers, and the interface on which the packet arrives - exactly matching all four criteria listed in the question.

An application proxy (application gateway) operates at the Application layer (Layer 7) and performs deep inspection of full protocol sessions rather than filtering raw packet headers at the Network layer.

A circuit-level gateway operates at the Session layer (Layer 5) and validates TCP handshake state without examining individual packet header fields such as source and destination IP addresses.

Network Address Translation modifies the source or destination IP addresses in packet headers to enable routing, but it is a translation mechanism, not a firewall type that filters traffic based on the criteria described.