A network security system that monitors and controls incoming and outgoing network traffic, based on predetermined security rules. Often used to keep hackers out and prevent unwanted access by anyone without authorisation.