A controlled network space, delimited by firewalls or other policy-enforcing devices, which is neither inside an organization’s network nor directly part of the internet. A DMZ is typically used to isolate an organization’s most highly secured information assets, while allowing predefined access to those entities that must provide or receive data outside of the organization. The access and services provided should be restricted to the absolute minimum required.
