# What is a DMZ in networking?

A DMZ (demilitarised zone) is a separate network segment for servers that must be reachable from the internet, such as a public web server, mail gateway or remote-access gateway, kept apart from the internal network. If one of those exposed servers is compromised, the firewall rules between the DMZ and the internal network limit what the attacker can reach next. The idea is simple: what faces the internet should not sit next to your file server. Watch traffic from the DMZ toward internal systems closely; a DMZ server starting new sessions inward is a strong sign of trouble.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-a-dmz-in-networking

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What are egress and ingress traffic?](https://netsenx.com/en/faq/what-is-egress-and-ingress-traffic)
- [What are east-west and north-south traffic?](https://netsenx.com/en/faq/what-is-east-west-and-north-south-traffic)
- [What are bandwidth and latency?](https://netsenx.com/en/faq/what-is-bandwidth-and-latency)
- [What are WPA2 and WPA3?](https://netsenx.com/en/faq/what-is-wpa2-and-wpa3)
- [What is an API?](https://netsenx.com/en/faq/what-is-an-api)