Half that prevents access stranger to a computer connected to a network from the Internet, LAN, etc.. It can be a computer, a router or a program, for example.