DMZ Explained | Demilitarised Zone

Поделиться
HTML-код
  • Опубликовано: 28 сен 2024
  • Join the Discord Server!
    / discord
    ---------------------
    MY FULL CCNA COURSE
    📹 CCNA - certbros.teach...
    FREE CCNA FLASHCARDS
    🃏 CCNA Flashcards - certbros.com/c...
    HOW TO PASS THE CCNA
    📚 Get a great book - amzn.to/3f16QA5
    📹 Take a video course - certbros.teach...
    ✔ Use practice exams - www.certbros.c...
    SOCIAL
    🐦 Twitter - / certbros
    📸 Instagram - / certbros
    👔 LinkedIn - / certbros
    💬 Discord - www.certbros.c...
    Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
    ---------------------------------------------------------------------------------------------------------------
    What is a DMZ?
    Well, the name comes from the military.
    In military terms, it's an area where military activity is forbidden, often along borders. A well-known example of a Demilitarised Zone is the border between North and South Korea.
    A DMZ, in computer terms, is similar. It's an area of a network where security rules and policies are more relaxed.
    But, why on earth would you want to relax security policies?
    Well, imagine you have a web server. You install it in your network just like all of your other devices.
    You want people to access your web server and visit your website right? So you allow public access to your web server through your router and firewall.
    Great, so now people can come and browse your website, www.example.com, and the request will be sent to your web server sitting inside your network.
    Now, this may seem fine, but it leaves you vulnerable to attacks. Web servers and websites are not bulletproof, and they require a lot of work to keep maintained, up-to-date and secure.
    Let's say an attacker targets your website, and that attacker can get access to the web server itself. This is where the problems start.
    Because our web server is installed alongside our other corporate servers and workstations, the attacker can now start to attack these machines from the web server. With a bit of luck, the attacker could gain access to the entire network. This is called lateral movement.
    From here, it's really up to the attacker what they do next. It could be the exfiltration of your data or infecting your systems with ransomware, which will encrypt your data.
    So, what is the solution?
    Instead of installing the web server in the corporate network, we can install it into its own network called a DMZ.
    A DMZ is created with two firewalls. The first firewall allows public access to our web server; the second firewall blocks public access.
    If an attacker can access our web server, they may try to get lateral movement by attacking other machines in the network. Well, because we have separated this web server into its own network, there are no other machines to attack, and our second firewall blocks access to our corporate network.
    So, while the web server has been compromised, the DMZ allows us to contain the attack to just that web server.
    This dramatically reduces the cyber attack's impact and makes the hacker sad. Meanwhile, the rest of the corporate network is unharmed and operating as normal.

Комментарии • 56

  • @klwthe3rd
    @klwthe3rd Год назад +24

    This video is honestly one of the most simple, yet clearly explained real life execution of a DMZ. I work in It Security and i've watched hundreds of videos that try to explain this concept but fail because of their lack of application. Videos that simplify concepts to a basic level help people learn better. Great job! 👍

  • @nadimsaade1753
    @nadimsaade1753 Год назад +1

    mate u are amazing u helped me a lot keep going never seen any simple way more then that

  • @CyberTronics
    @CyberTronics 4 месяца назад +2

    How does having 2 firewalls provide better security & redundancy?
    The firewalls are protecting different elements.
    If one firewall goes down the internal traffic won’t be getting out since it’s in the path of outgoing traffic….?

  • @snowballeffects
    @snowballeffects Год назад +3

    Great overview - cheers Sam!

    • @Certbros
      @Certbros  Год назад +1

      Thank you! Glad you liked it

  • @dragongames3057
    @dragongames3057 Год назад +3

    Thank you for the info brother.

  • @lenyfreeman3807
    @lenyfreeman3807 Год назад

    Great simplified explanation AND application. Since watching I'm thinking the public facing network should be on a separate provider circuit.

  • @BosonSoftware
    @BosonSoftware Год назад +2

    Great stuff as always! 💚

    • @Certbros
      @Certbros  Год назад

      It's always a good day when Boson shows up in your comment sections! 😁
      Thank you!

  • @Certbros
    @Certbros  Год назад +3

    Is it DM-Zed or DM-Zee? 🤔

    • @rahulsinghpatel9621
      @rahulsinghpatel9621 Год назад +3

      DM- Zee is the correct pronunciation currently being used in the industry

    • @IT10T
      @IT10T Год назад

      @@rahulsinghpatel9621 It was rhetorical, they are aware of that, they are poking fun at his accent.

    • @CyberTronics
      @CyberTronics 4 месяца назад

      DM Zed THANK YOU FOR SAYING IT PROPERLY AND NOT SUBMITTING TO THE …. (You know who) 😅

    • @ondoreoku
      @ondoreoku Месяц назад

      I guess it depends on pronunciation.

  • @orleydoss3171
    @orleydoss3171 Год назад +3

    Good stuff 👍

    • @Certbros
      @Certbros  Год назад +1

      Thank you as always Orley!!

  • @leanophologolo9066
    @leanophologolo9066 7 месяцев назад +1

    i was looking for DMZ call of duty but i stayed

  • @marcosalameh8677
    @marcosalameh8677 Год назад +1

    Perfect!

  • @spacey_jones
    @spacey_jones 10 дней назад

    great!

  • @geekmuralin
    @geekmuralin 3 месяца назад

    Thank you

  • @Amwfilms
    @Amwfilms Год назад

    Great video thanks for the animation to further drive the concept home.

  • @anuzravat
    @anuzravat Месяц назад

    thanks

  • @sarfarazahmad221
    @sarfarazahmad221 Год назад

    Excellent explanation 🎉❤

  • @anldursun8300
    @anldursun8300 8 месяцев назад

    then how the web server talks to the backend?

  • @impcareer4055
    @impcareer4055 Год назад

    cool

  • @yogesh7125
    @yogesh7125 Год назад

  • @made432
    @made432 21 день назад

    Dee M Zete 😂

  • @furkankaraslan9040
    @furkankaraslan9040 Год назад

    wth?? just in time

  • @Jobberwocky
    @Jobberwocky 8 месяцев назад

    You cannot create with vlans.

  • @harisharavindkumar7400
    @harisharavindkumar7400 Год назад +4

    I'm a beginner and I simply love the way you explained with with animation and pictures. Thanks a bunch!!!

  • @Shubham-Mishra
    @Shubham-Mishra Год назад +3

    Hey please keep uploading CCNA related videos.. lot's of love 🤗❤

  • @silvanabongiorno3292
    @silvanabongiorno3292 Месяц назад +1

    Thanks👌👍

  • @LoremIpsum797
    @LoremIpsum797 Год назад +3

    If you block any other traffic (source WAN, destination any, port any, action - deny) then how workstations can browse Internet?

    • @Certbros
      @Certbros  Год назад +1

      Great question! Most firewalls are statefull. This means that if traffic is allowed out, then it will be allowed back in. I didn't show outbound rules here because they're not relevant to DMZs. Hope that helps!

    • @LoremIpsum797
      @LoremIpsum797 Год назад +1

      @@Certbros Thank you for your clear explanation ☺️ that makes sense

  • @lethalz4519
    @lethalz4519 Год назад +3

    D EM ZED

  • @Splo0tzer
    @Splo0tzer 29 дней назад

    Great presentation, man 👏cheers!

  • @RaphaelPoppy-q3j
    @RaphaelPoppy-q3j 4 дня назад

    Moen Camp

  • @chochanga
    @chochanga Год назад +1

    Hi CertBros. I just checked your website. The CCNA course is already available to purchase?

    • @Certbros
      @Certbros  Год назад

      Hi Chochanga. Yes you can purchase the course by going to courses.certbros.com. Hope to see you there 😎

    • @chochanga
      @chochanga Год назад

      @@Certbros great! When did you finished it?

  • @Omairi86
    @Omairi86 2 месяца назад

    Can a server in a DMZ pose a security risk to the rest of the network? Like if i put my playstation ip on DMZ network will it put any danger on my other devices if it got hacked ?
    Thank you in advance.

    • @Certbros
      @Certbros  Месяц назад +1

      The purpose of a DMZ is to protect the rest of the network from the public facing assets. As for the playstation, other than a possible slight increase in network performance, I can’t think of any benefits.

  • @kahlillabastilla3584
    @kahlillabastilla3584 3 месяца назад +1

    Subscribed, sir! This is great stuff.

    • @Certbros
      @Certbros  3 месяца назад

      Thank you! Happy you enjoyed the video.

  • @laitkoriancowboy83
    @laitkoriancowboy83 9 месяцев назад

    I love you for creating this video and explaining so beautifully ❤

  • @ukaszkiepas57
    @ukaszkiepas57 3 месяца назад

    Thank you !!!
    Awesome!

  • @mihaelahozmache7538
    @mihaelahozmache7538 5 месяцев назад

    This is super useful. Thank you!

  • @radicalsolih
    @radicalsolih Год назад

    Wish you big growth!🎉❤

  • @Don-Carillo
    @Don-Carillo Год назад

    appreciated as always, one of the best at making learning enjoyable and easy to absorb

  • @gaBehcuoDsuoitneterP
    @gaBehcuoDsuoitneterP Год назад

    👍

  • @FanaticosdelRouting
    @FanaticosdelRouting Год назад

    Great job