A public facing subnetwork that operates between the trusted local machines of its network and the outside world. In a DMZ network, untrusted internet traffic is routed to the DMZ subnet before it can reach the trusted local machines on the network.