A device that actively blocks TCP/IP or UDP traffic on a public or private network. They usually block ports that hackers or virii use to compromise systems. They also cause problems for the free flow of network traffic depending how well they are setup.