Secure internet gateway
This architecture details the services hosted in the DeMilitarized Zones, and the layers of protection provided by the firewalls. It is a good modelling of the castle-and-moat architecture.

Note: Based on original learning material from ANSSI documentation Recommandations relatives à l’interconnexion d’un système d’information à internet.