what is dmz?

A Demilitarized Zone is used by a company that wants to host its own Internet services without sacrificing unauthorized access to its private network.

The DMZ sits between the Internet and an internal network's line of defense, usually some combination of firewalls and bastion hosts.

Typically, the DMZ contains devices accessible to Internet traffic, such as Web (HTTP ) servers, FTP servers, SMTP (e-mail) servers and DNS servers.

agree with #1

demilitarized zone setup in firewall configuration,to specific ISP subnet setup

It is a network segment whose access security is less restrictive than your coporate network, but more secure than the internet at large.

Typically, you would create a DMZ network segment to allow people on the internet to access your public systems like web and ftp servers.

A DMZ can be created by building a box with three network cards (NIC). One NIC will connect to the internet, the second to your internal network, the third to your DMZ.

A DMZ is also known as a secure subnet which might help you understand the principle. Basically you create a network segmnet that contains the servers providing services that you want to be available via the internet. These typically include DNS, web servers and email. You then secure access to this segment from the rest of your network via a firwall. You then configure another firewall to protect this segment from the internet. If you do not have 2 firewall boxes available then you can dothis by placing 3 interfaces in one box (one to the internet, one to the DMZ and one to the rest of the network.

a dmz is where both good and bad can exist. In the internet zone you will find unsecured users or bad. In the Intranet you will find secured users. In the DMZ users from the internet will be proxied to a specific resources or resources only thos resources (ie. web server, sql server, web cache, citrix servers etc). The intranet then allows only those resources access inside. THis is one of the safest ways of allowing public to private networks.

The ACLs that perform this should only you to granualize the security policy down to ports, ip addresses, login names etc.

I always think about what a DMZ is to the military and then apply it to the network.

Hope this helps

Security is very important, specially if you host your own servers. To separate your corporate LAN from public servers is a safety solution. It's also called ?demilitarized zone? or DMZ.

I am sending a picture to your mail.

Regards

This question was auto closed due to inactivity