D3 · Architecture

What is a screened subnet?

A screened subnet places a firewall between the internet and public-facing servers, with another between those servers and the internal network — equivalent to a DMZ with two firewalls.
Screened subnet = DMZ = demilitarized zone. All describe the same architecture. The inner firewall screens the internal network from the screened subnet. More secure than single-firewall tri-homed design.
← Back to Glossary Practice Questions →