DMZ

 DMZ 

 

DMZ is an abbreviation for demilitarized zone. It is a physical or logical subnet that separates a local area network (LAN). From other untrusted networks – usually, the public internet. DMZs are also known as perimeter networks or screened subnetworks. Some of the most common of these services include web, email, DNS, file transfer protocol and proxy servers. 

 

Features of DMZ 

One feature of DMZ in networking is that it adds another layer of security to a network. As mentioned before, it isolates the internal network from direct exposure to the internet. A DMZ mitigates the risk of external attacks reaching critical internal systems. Monitoring and logging are also a feature of DMZ. Traffic to and from the DMZ is closely monitored and logged, providing detailed records for security audits and incident reports. One final feature is that usually two firewalls are used; one between the internet and the DMZ and another between the DMZ and internal network. The dual-firewall configuration enhances security by adding layers of protection. 

 

Pros of DMZ 

• Improved security posture  

• Detailed traffic control 

• Protection against external threats 

• Controlled access 

• Easier updates and maintenance 

 

Cons of DMZ 

• Initial configuration complexity 

• Initial set up cost 

• Compliance requirements e.g. GDPR  

• Operational costs