Qubes Firewall: A network firewall or application-based firewall

[npdflr]

Hello,
Is the Qubes Firewall a network firewall or an application-based firewall?

Does it have any real time allowing/blocking of applications? or
Is a qubes user completely responsible for allowing apps in an AppVM to connect to the internet via a FirewallVM?

Thank you.

[awokd]

'npdflr' via qubes-users:

https://www.qubes-os.org/doc/firewall/
(Network only.)