Another strategy often employed to provide different types of protection is a demilitarized
zone (DMZ), as shown in Figure 8.3. Assume the firewall has three connections
(sometimes called a multihomed device): one for the external network (Internet), one for the
Web server, and another for the internal network.