Eleventh Hour Security+

What is a DMZ?

In computer security, the demilitarized zone (DMZ) is a “neutral” network segment where systems accessible to the public Internet are housed, which offers some basic levels of protection against attacks. The term DMZ is derived from the military and is used to describe a “safe” or buffer area between two countries where, by mutual agreement, no troops or war-making activities are allowed. In the next sections we will explore this concept in more detail.

DMZ DESIGN

There are usually strict rules regarding what is allowed within a zone. When applying this term to the IT security realm, it can be used to create DMZ segments in usually one of two ways:

• Layered DMZ implementation
• Multiple interface firewall implementation

In the ...