Firewall
280
8.3
The BAT Firewall
BAT54-Rail/F..
Release
7.54
06/08
D The stations of the LAN can access the Internet, as well as servers in the
DMZ.
D Servers of the DMZ have no access to the stations of the LAN. That guar-
antees that no “cracked” server of the DMZ becomes a security risk for
the LAN.
Some BAT models support this structure by a separate LAN interface only
used for the DMZ. Looking at the path of data through the BAT, then the func-
tion of the Firewall for shielding the LAN against the DMZ becomes visible.
Internet
DMZ
Local network
FTP server
Web server