Hardware: A physical firewall works independently from the computer(s) it’s protecting as it filters information and traffic coming from the internet into the network or work group. The unit will protect the entire network and devices, not just one computer. These business-class units provide deeper and more advanced protection from a broader range of threats. It can also allow traffic (or restrict) to certain devices such as a server or camera system while leaving the rest of the network/group protected.
Software: This is a program on a computer itself. It inspects the data coming in and out of the specific device. It can be customized by the user and provides only a basic level of protection, and only when the unit is up and running.
Thanks Dan! — CMW