Same thing, more-or-less. And NAT is effectively a firewall for inbound traffic, even if a lot of people say it isn't.