It is hardware or software which protects a private network or a single computer. What basically does is it limits the access to or from that network resulting in greater security.