A Safe but Potentially Risky Place: The DMZ

A Safe but Potentially Risky Place: The DMZ

[View full size image]

When using a DMZ, the flows that are allowed are the same as before, but the location of the servers that are accessible from the Internet has changed. The Internet-accessible servers have been placed on a different LAN. Because of that, a strong rule can be configured on the firewall: Absolutely no TCP connections can be initiated from the outside (Internet) to the inside (the internal network). The only flows that are allowed to be initiated into Fred's internal network are the ones to the servers in the DMZ. By using a DMZ, the firewall creates a stronger, more secure set of security rules.