It refers to a combination of hardware and software that separates a LAN into two or more parts for security purposes.
