- [Instructor] A true DMZ is the most secure
firewall architecture.
To set up true DMZ what you need is
two network firewall host and switches.
The first network file host serves as an external firewall
interfacing with the external network and the DMZ.
The second network firewall host acts as
an internal firewall interfacing with the DMZ
and the internal network.
When we have one network firewall
in a much simpler topology,
it only separates the external network
from the internal network.
In the true DMZ topology,
we introduce a second network file host.
Therefore, in between the two network file host
we're creating a new sub-net, which is our DMZ.
Think of this as adding a second network file host
through the internal interface
of the first network file host.
In the true DMZ topology,
we protect an internal network better
because it's behind the second firewall.
There are two layers of firewalls in this architecture.
Your internal network hosts get additional protection
and separation from the hosts in the DMZ.
True DMZ is a gold standard in network security.