Commando AirONE AP1300, Руководство по настройке

Страница: 89 / 112

Fig 5.4.2 Security Rules setting for AirONE AP1300
Fig 5.4.3 Security setting for AirONE AP1300
5.5 DMZ Settings
DMZ or demilitarized zone is a physical or logical subnetwork that contains portion of your
network carved off and isolated from the rest of your network of an organization's
external-facing services to an untrusted, usually larger, network such as the Internet.
The main benefit of a DMZ is to provide an internal network with an additional security
layer by restricting access to sensitive data and servers. A DMZ enables Website visitors
to obtain certain services while providing a buffer between them and the organization's
private network. The goal of a DMZ is to add an extra layer of security to an organization's
local area network. A protected and monitored network node that faces outside the
internal network can access what is exposed in the DMZ, while the rest of the
organization's network is safe from attackers.