3

During a recent conversation with a network security team, one of them said: "Look, if that server is terminating incoming connections, it must be in the DMZ."

What does it mean to "terminate" network connectivity in this context?

3
  • You'll need to give us more context. "Terminate" can mean "filter" or (more likely here) it can mean "provide an endpoint" (for a socket or tunnel).
    – Zac67
    Oct 30 '20 at 21:52
  • You’re right. The context was guessed by @Jesse P. below.
    – jppunnett
    Nov 1 '20 at 0:32
  • If any of the answers below were helpful, please mark them as the accepted answer. Alternatively, you can post your own answer and accept that.
    – Jesse P.
    Nov 1 '20 at 2:31
2

If it's a hop on the path that a client (user) accesses publicly, whether a final destination (such as a webserver), or just a proxy/firewall, etc. that leads to another hop, it needs to sit in the DMZ and not be inside of your internal network. This way, no holes need to be punched for direct user access into your internal network, and only holes between the DMZ host and its backend (like a database server) need to exist.

So, in this context, "terminate" simply means whatever the user directly accesses publicly.

2
  • Yes, this makes perfect sense now. Thank you.
    – jppunnett
    Nov 1 '20 at 0:33
  • @jppunnett Cool. Glad I was able to help.
    – Jesse P.
    Nov 1 '20 at 2:30
1

"Terminate" has two major meanings:

It can mean filter or break a connection, or (much more likely here) it can mean "provide an endpoint" (accept a socket connection or create a tunnel end).

1

Destination server might be reseting or terminating session so that session is closed and unable to access resources on servers from outside networks When services on specific ports are not in listening mode session will get reseted or terminated at destination server end .

To overcome this issue . please ensure services on specific ports are in listening mode in destination server which in depolyed in DMZ segment..

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.