Carrier Access Adit 3200, Reference Manual

Page: 171 / 262

Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.0) GUI 4-17
Security
DMZ Host
DMZ Host
The DMZ (Demilitarized Zone) Host feature allows one local computer to be exposed to the Internet.
Designate a DMZ host when:
Using a special-purpose Internet service, such as a video-conferencing program, that is not
present in the Local Servers list and where no port range information is available.
You are not concerned with security and choose to expose one computer to all services without
restriction.
The DMZ host is an NAPT function. It only applies to packets whose destination address is the Adit's
own WAN IP address. It only is utilized when there are no matching Local Servers or Remote
Administration matches. When the DMZ Host configuration is applied, packets are redirected from the
Adit WAN IP address to the DMZ host's IP address.
Note: The DMZ Host is only active if the firewall
is enabled on the WAN interface, regardless of whether the WAN interface routing type is set for NAPT
or Routing.
WARNING!
A DMZ
HOST IS NOT PROTECTED BY THE
F
IREWALL AND MAY BE VULNERABLE TO
ATTACK
. I
T MAY ALSO PUT OTHER COMPUTERS IN THE NETWORK AT RISK
. W
HEN DESIGNATING A
DMZ
HOST
,
YOU MUST CONSIDER THE SECURITY IMPLICATIONS AND PROTECT IT IF NECESSARY
.
An incoming request for access to a service at the Adit WAN IP address, such as a Web-server, is fielded
by the Adit and forwarded to either:
a matching configured Local Server, or
a permitted Remote Management session, or
the DMZ host (if one is designated)