DMZ, a DMZ or a perimeter network is a means of allowing the public to access the certain network services
while still maintaining the security of your internal devices.
At this point, you may be thinking that's what I that's what an external does.
External international does.
Yes, there are some similarities between them.
But remember, an excellent provides access to do services to trace that organization's various themes.
It allows access to the public, no trust or after authorization is required.
Obviously, making anything accessible to the public brings with it in here and security risks.
So it's important that only services that are deemed as a public facing and necessary are placed there
and that suitable security mechanisms are put in place as added protection.
Common services that all police in the DMZ include a Web server and a domain name system, D and a server.
So now I will write, uh, create and new diagram here.
Lower tier, for example, uh, this will be its will our internet here.
Double, double, double.
So next, we will intranet here.
In intended.
Here.
It's a little bit cooler, so.
These cars to firewall.
Here this is the firewall, so firewall, for example, in its name, it firewall me.
And.
I will be.
And, uh, these five will be here.
So this course to firewall and our firewall me goes to double double W here, so you can see here.
Uh, so, yeah, this goes to here and actually we will need another firewall here, which will be the
firewall a year.
Or A.
And then lastly, this finally goes to Internet.
I will explain all of this here, Internet.
Yes, Internet.
So.
And this is actually TMZ here.
EMC.
So, Emira, so this diagram shows examples of fiber placement when implementing a DMZ.
So in this day round, we can see that the DMZ has been implemented using two firewalls in this instance
Firewall A here, uh, firewall a.
Uh, actually is a vote to have rules that will allow traffic requesting Web traffic and um, actually
this firewall, they will they have rules that three traffic requesting web traffic and file will be
here.
We'll have rules that block inbound requests from web traffic.
So some organizations will pass such firewalls from two different manufacturers.
If organizations use the same firewall throughout its infrastructure and that firewall had a vulnerability,
then the vulnerability will likely be reproduced across the network.
However, if firewalls from different manufacturers were used, then if vulnerability in one model will
be likely to be replicated across the network.
So, uh, this means that, uh, firewalls is best to use different, um, manufacturers in one place.
So a more common implementation of firewalls is the three homed firewall here.
So.
It's right here, let's actually create in the diagram.
Uh, three homed, uh, three.
So for these, uh, we will not need um.
A firewall here, firewall.
And to clots here.
Here.
This is our internet internet here.
So.
Make much bigger fireball here and then clocked here.
Double, double, double.
Oh, here.
Is course here?
This was here.
And this goes here.
So.
This common implementation of firewalls was either named three hond firewall.
You're late.
Uh, it's right here.
Three Home Firewall.
Next year.
The.
On.
All right, well.
Three home firewall.
So this implementation is sometimes also referred to as triple bond firewall or screen at summit.
Each home on the firewall refers to a different network.
So the external network, the DMZ and the internal network.
I'll talk to, um, here, uh, in an internal network.
So let's.
Right here DMZ actually not, uh, w w w.
And this is a DMZ.
So all told, a simple firewall is being utilized.
Each port can have different rules assigned to it, for example, port to kind of low inbound requests,
traffic and port three can block this traffic.
While it obviously saves the cost for only requiring one firewall, it increases the risk.
If that one firewall is breached, then both the DMZ and the internal network called be compromised.