A network security device that monitors incoming and outgoing traffic and decides to allow or block specific traffic based on a defined set of security policies. They are the first line of defense in network security.