Firewalls are devices that separate networks at defined chokepoints to enforce policies for one or both networks.