Screened subnet architecture: A network configuration that uses firewalls to create a “demilitarized zone” (DMZ), a separate subnet for public-facing servers. In this setup, one firewall sits between the internal network and the DMZ, and another firewall sits between the DMZ and the external network (e.g., the internet). This configuration allows public traffic to access servers in the DMZ while maintaining a protective barrier between the external network and the internal network, thereby enhancing the security of the internal network.