Demilitarized Zone (DMZ) Glossary Definition

In computer security, a DMZ or demilitarized zone (sometimes referred to as a perimeter network) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to an untrusted network, usually a larger network such as the Internet.

See also: DMZ.

Demilitarized Zone (DMZ) is a Network Security concept used to protect traffic, access, devices, applications, or segments from misuse or attack.

This term is used in software engineering, programming, scripting, testing, application architecture, and development lifecycle work. It helps teams describe how software is designed, implemented, integrated, and maintained. This entry also has related glossary assignments in Enterprise Applications, CRM, and Contact Center Systems, so it may appear in more than one professional context.

Related concepts include World Wide Web.

Additional Resource: MDN Web Docs Glossary.

Security and infrastructure teams use this concept to reduce exposure, enforce access boundaries, inspect traffic, and limit the impact of compromise.

Related concepts include Routing.

Additional Resource: NIST Computer Security Resource Center Glossary.