A network configuration, usually both hardware and software, that prevents unauthorized traffic into and out of a secure network.