Commando AirONE AIR-CPE5K+, Руководство по настройке

Страница: 56 / 78

DMZ or demilitarized zone is a physical or logical subnetwork that contains portion of your
network carved off and isolated from the rest of your network of an organization's
external-facing services to an untrusted, usually larger, network such as the Internet.
The main benefit of a DMZ is to provide an internal network with an additional security
layer by restricting access to sensitive data and servers. A DMZ enables website visitors to
obtain certain services while providing a buffer between them and the organization's
private network. The goal of a DMZ is to add an extra layer of security to an organization's
local area network. A protected and monitored network node that faces outside the
internal network can access what is exposed in the DMZ, while the rest of the
organization's network is safe from attackers.
Fig 6.5.1 Default DMZ setting for AirONE AIR-CPE5K+