Demilitarized Zone (DMZ): A physical or logical subnetwork that separates an organization’s internal network from an untrusted network, usually the Internet. By placing servers that interact directly with the external environment, such as web servers or email servers, in the DMZ, an additional layer of security is established that helps protect the more sensitive internal systems from unauthorized access or attacks.