Security Zone

A security zone is a specific portion of a network to which certain security protocols and guidelines apply. These protocols will vary depending on the zone. Traditionally, the three layers of network security zones are 1) the outer zone, such as the Internet; 2) the zone in between, often including a firewall; and 3) the trusted inner or private network. This inner zone might be all of a company’s private resources, such as their connected networks, IP address, and applications. The outer zone is public, often requesting access to parts of the private network: for example, an Internet user searching for the company’s webpage.

The in-between security zone is often known as a demilitarized zone (or DMZ). This middle zone is where the outer and inner networks interact. A firewall would be employed in this middle area; it filters traffic and requests from the public outer network to the private one. In a traditional network zone structure, a DMZ receives heavy monitoring because it is where Internet users or traffic from public networks are most likely to enter the private network and potentially access sensitive data. DMZs can include the places where internal and external servers communicate, like websites and domain name system servers.

Traditional network segmentation vs. microsegmentation

Security zones typically rely on perimeter technology, such as firewalls, to filter all of the traffic and requests coming from outer networks. That’s traditional network segmentation: the entire private network of a company is surrounded by security measures. But inside, there is little to no protection. If an attacker does make it past the firewall, they have access to all of the internal network’s connected applications and platforms.

It’s better to implement microsegmentation, especially for larger organizations with more sensitive data. Microsegmentation establishes security zones within the private network as well, not trusting that every bit of traffic that passes through the firewall is safe. Establishing smaller security zones that all have their own protocols (which might vary depending on the application or platform) is better for big networks, in case an attacker accesses them. Zero trust is a similar security approach.






Jenna Phipps
Jenna Phipps is a contributor for websites such as Webopedia.com and Enterprise Storage Forum. She writes about information technology security, networking, and data storage. Jenna lives in Nashville, TN.

Top Articles

The Complete List of 1500+ Common Text Abbreviations & Acronyms

Text Abbreviations reviewed by Web Webster   From A3 to ZZZ we list 1,559 SMS, online chat, and text abbreviations to help you translate and understand...

Windows Operating System History & Versions

The Windows operating system (Windows OS) refers to a family of operating systems developed by Microsoft Corporation. We look at the history of Windows...

How to Create a Website Shortcut on Your Desktop

Website Shortcut on Your Desktop reviewed by Web Webster   This Webopedia guide will show you how to create a website shortcut on your desktop using...

Generations of Computers (1st to 5th)

Reviewed by Web Webster Learn about each of the 5 generations of computers and major technology developments that have led to the computing devices that...

How to Indent in...

Microsoft Word is a graphical word...

Webcam

A webcam, short for web camera, is a piece of video hardware that...

Binary System

The binary system in computing uses the base 2 number system to power...