Network protection against potentially successful attacks

Perimeter protection is a fundamental level of cybersecurity for mitigating threats within one's own network from both the internet and other networks. It is primarily implemented using firewalls and appropriately configured rules to ensure the secured network is protected as much as possible from undesirable external activities. Where it is necessary to provide services to users outside the local network, such as email, web services, and DNS, a so-called demilitarized zone (DMZ) is created.

In the field of computer security, a DMZ is a physical or logical subnet that is separated from other devices for security reasons. This logical subnet houses services that are available from the outside, usually from the internet. The purpose of a DMZ is to add an additional layer of security to the local network, ensuring that a potential attacker only gains access to devices within the DMZ, while the rest of the local network remains secure.