A DMZ, or demilitarized zone, is a network area between an internal trusted network and an external untrusted network like the internet. It improves security by acting as a buffer between the two networks. There are two common DMZ architectures - single firewall and dual firewall. A dual firewall configuration is considered more secure as it provides separation of the DMZ from both the internal and external networks, while a single firewall connects them all together. Common servers placed in the DMZ include web, mail, FTP, and proxy servers to allow access from outside while protecting the internal network.

1. Unique IT Care
© Copyright Unique IT Care. All Rights Reserved
DMZ (Demilitarized Zone)
 Is a special type of network between the internet (which is an
untrusted network) and the corporate network (which is a trusted
network).
 A network zone between an external network and the internal
network.
 Used to improve the security of an organization's network.

2. Unique IT Care
© Copyright Unique IT Care. All Rights Reserved
DMZ Design Architecture
Design
Architecture
DMZ
Single firewall Dual firewall
 Dual firewall is more secure than Single firewall

3. Unique IT Care
© Copyright Unique IT Care. All Rights Reserved
DMZ Architecture Single Firewall
 Single firewall is less secure than dual firewall

4. Unique IT Care
© Copyright Unique IT Care. All Rights Reserved
DMZ Architecture Dual Firewall
 Dual firewall is more secure than Single firewall

5. Unique IT Care
© Copyright Unique IT Care. All Rights Reserved
DMZ Common Service
DMZ Common
Service
Web Servers
Mail Servers
FTP Servers
NDS Server
Proxy Servers
VoIP Servers

6. Unique IT Care
© Copyright Unique IT Care. All Rights Reserved
Advantages
 Reduce and control access
 Facilitate Access Control
 Prevents network reconnaissance
 Protects from Internet Protocol (IP) spoofing
Drawbacks
 No internal Protections: Your employees
and authorised users will still tap into the
very sensitive data you store for your
company

7. Thank You!
You have any query just comment. I will try response as early as possible.
© Copyright Unique IT Care. All Rights Reserved
Unique IT Care