If firewall > 0 then it's take's damage. For example enemy has 3 firwall and 30 ip_security you are using any attack card for example trojan -> boom enemy has 0 firewall and 28 hp. And you also gain -5 ip_security(if you didn't have any firewall)
It's just like hp and block in Slay the Spire