A hardware device or computer program that resides between an internal network or computer and the Internet. It can be configured to allow only specific kinds of messages from the Internet to pass to the internal network, thereby protecting it from intruders or hackers who might try to use the Internet to break into those systems.
