Demilitarized zone (computing)

In computer security, a demilitarized zone (DMZ), based on military usage of the term but more appropriately known as a demarcation zone or perimeter network, is a physical or logical subnetwork that contains and exposes an organization's external services to a larger, untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's Local Area Network (LAN); an external attacker only has access to equipment in the DMZ, rather than the whole of the network.

Demilitarized zone (computing) - Wikipedia, the free encyclopedia.