A system that filters network traffic in and out based on rules, blocking what isn't explicitly allowed.