A network DMZ is a location where network devices can be placed and accessed from the outside world directly. In most corporate networks, all of the internal systems are behind firewalls and filters. If there is a need to provide external access, a DMZ is created. The name DMZ comes from the concept of creating safe zones/areas where no military presence is allowed between countries or in contested areas. There is a demilitarized zone between North and South Vietnam, which also acts as the border. When we look at this from a networking perspective, DMZ is an area where there is less protection/monitoring, which is a similar idea.

DMZs are often used to host servers such as FTP, mail, and others that are likely to be compromised systems, such as DNS. A DMZ offers a secondary level of protection for your internal network by segregating dangerous traffic.

Design of a DMZ in concert with an internal network

Some companies, such as Cisco Systems, offer a DMZ...