The DMZ or demilitarized zone is a physical or logical subnet or portion of an enterprise network that sits between the internet (firewall) and the enterprise’s LAN, adding an additional layer of security. DMZs play a key role in isolating and keeping potential target systems from internal networks and also reduces access to those systems.