SmarLink FW50, User Manual

Page: 21 / 28

Shenzhen Newchiba smartlink Technology Co., Ltd. www.newchiba.com
20
3.DMZ Host
DMZ is the abbreviation of “demilitarized zone” in English, and the Chinese name is “Geli Qu” , also
called as “ Fei Junshihua Qu” . It is to solve the problem that the access user of the external network cannot
access to the internal network server after installing the firewall, and it’s a buffer between the non-secure
system and the security system. This buffer is located in a small network area between the internal
network and the external network of the enterprise. In this small network area, users can place some
server facilities that must be exposed, such as enterprise Web servers, FTP servers, and forums. On the
other hand, the internal network is more effectively protected by such a DMZ area. Because of this kind
of network deployment, compared with the general firewall solutions, there is another obstacle for the
attacker from the external network. The principle of DMZ is the same as the port forwarding principle,
except that the port forwarding just opens one port, while the DMZ opens all ports.