Hey everybody welcome to the next video.
So in this field we talk about a DMZ a DMZ or demilitarized zone is often called the perimeter network.
Now this is important because a lot of enterprises will have a perimeter network.
This is the network that kind of holds all of the Web sites or the web servers the e-mail server stuff
that doesn't need to interact with everything internally.
This is commonly used for static based Web sites as well but in most cases in their prayers we'll have
a perimeter based network.
Now this network is special in the terms that it's it allows Internet access to some internal resources.
That's that's in a specific network but not anything else.
So it won't let it reach to another another network inside of the organization now a firewall is what's
actually used to create the DMZ.
So the DMZ is not a network per say.
It's a you have us you have a firewall and you have a port on a firewall.
Now that port connects to a switch which will then connect to whatever services or host that you want.
Now you can mark that port as a DMZ which means only Internet traffic can go to it and only traffic
from that can.
From that network can go out to the Internet and it will have specific rules that says it cannot.
Nothing can bounce back and forth between that network and any of the others that might be on the Enterprise.
It's important to understand a DMZ because you may find yourself in the on a machine after let's say
compromising a web server you find yourself on a machine that only has you know 10 hosts on the network.
What's important understand here is that some enterprises will use something called a dual home machine.
Now this a dual homemade machine is when a single host has two network cards and is able to connect
to a different network.
This is where stuff like pivoting comes into play which we're going to have a whole video on how to
do pivoting but understand that this is where you're going to want to use it because that way you're
able to pivot from this compromised host inside of a DMZ to another entire network that this particular
one host can access.
It's important understand that we're not gonna go too much in the DMZ as we will.
However in our P.F. sense module we configure a firewall we will configure a DMZ at that point in time
so you can see a little bit more of how it's being built and how it works.