Perimeter network that adds an extra layer of protection between internal and external networks by enforcing the internal network’s IA policy for external information exchange. A DMZ, also called a “screened subnet,” provides external, untrusted sources with restricted access to releasable information while shielding the internal networks from outside attacks.