A combination of hardware and software that separates a network into two or more parts for security purposes.