ATCOM 5520 User Manual page 40

DMZ config： In order to make some intranet equipments support better service
for extranet, and make internal network security more effectively, these
equipments open to extranet need be separated from the other equipments not
open to extranet by the corresponding isolation method according to different
demands. We can provide the different security level protection in terms of the
different resources by building a DMZ region which can provide the network level
protection for the equipments environment, reduce the risk which is caused by
providing service to distrust customer, and is the best position to put public
information The following chart describes the network access control of DMZ.
40