Software (or a computer running such software) that prevents unauthorised access to a network by users outside the network. (A physical firewall prevents the spread of fire between two physical locations; the software analogue prevents the unauthorised spread of data.)