Dmz

[pate.miral]

does dmz contains physical appliance? or it is logical part on firewall?

[Jon Marshall]

A DMZ is usually physical network connected to an interface on the firewall. So you would have physical servers etc. in a vlan and the L3 interface for this vlan would be on the firewall.

Jon

[pate.miral]

what should be the reason to put those server in dmz zone?

[Karsten Iwen]

This is not that easy to answer as it can get quite complex ... Please start by reading some definitions on DMZs:

• https://www.sans.org/reading-room/whitepapers/firewalls/designing-dmz-950
• https://en.wikipedia.org/wiki/DMZ_(computing)
• http://searchsecurity.techtarget.com/definition/DMZ
• http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/IE_DG.html