DMZ

In a typical DMZ configuration for a small company, a separate computer (or host in network terms) receives requests from users within the private network for access to Web sites or other companies accessible on the public network. The DMZ host then initiates sessions for these requests on the public network. However, the DMZ host is not able to initiate a session back into the private network. It can only forward packets that have already been requested.

Users of the public network outside the company can access only the DMZ host. The DMZ may typically also have the company's Web pages so these could be served to the outside world. However, the DMZ provides access to no other company data. In the event that an outside user penetrated the DMZ host's security, the Web pages might be corrupted but no other company information would be exposed. Cisco, the leading maker of router s, is one company that sells products designed for setting up a DMZ.

>> Stay up to date by receiving the latest IT term daily. Simply check "Word of the Day" to register.

Getting started with a DMZ

To explore how a DMZ is used in the enterprise, here are some additional resources:

Implementation of essential DMZ security technologies: Are you building a DMZ network? If so, be sure to check out this list of essential DMZ security technologies before you do.

Preventing hacker access to domain controllers: If a hacker compromises corporate domain controllers he/she can gain access to the entire Windows infrastructure, meaning their placement should be carefully considered. Learn if the DMZ is a good place to put your domain controllers.

Read more about DMZ: - SearchSecurity.com offers DMZ-related information in its "Intrusion Management" section. - Marcus J. Ranum's Internet Firewalls Frequently Asked Questions also discusses the DMZ.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

BROWSE BY TAG DMZ Setup and Configuration,   NAC and Endpoint Security Management,   Enterprise Network Security,   VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT How to set up a DMZ Looking to set up a DMZ? Look no further. In this expert response, Mike Chapple explains the steps to creating a demilitarized zone. How to configure firewall ports for webmail system implementation Network security expert Mike Chapple explains why he always recommends placing any server accessible from the Internet into the DMZ. When should a database application be placed in a DMZ? Mike Chapple explains the best network location for an important database application. Chapple also reveals the appropriate level of access to grant...