a networked computer from which users can perform on-line actions while keeping their local environment isolated from the on-line actions for protection from malware