A combination of software and hardware which, for security purposes, separates a LAN into two or more parts, or partially isolates a network from the Internet.