DMZ is unsecure or semi-secure ?

[ruilin yang]

I feel DMZ is unsecure since it is sitting outside of the firewall. However, I saw somebody's note in this forum saying it
is semi-secure.
I am confused. Please help
Ruilin

[Robert De]

I feel DMZ is semi-secure. A DMZ is a computer host or a small network that sits between the Internet and the company's private network like a buffer. But a DMZ does not sit outside the firewall. Infact, even the DMZ is inside the firewall. Any outside user can access the DMZ but it cannot access the data in the company's private network.
Robert

[ruilin yang]

Robert,
Thanks for your reply.
Please refer to: http://www.howstuffworks.com/firewall.htm
It says DMZ is outside of the firewall. I confused.
Please comment
Regards,
Ruilin

[Robert De]

Ruilin
You can look at this article :
http://www.sans.org/infosecFAQ/securitybasics/DMZ.htm
You can also look at this page : http://www.checkpoint.com/vpnguide/d.html
Thanks.
Robert

[ruilin yang]

Thanks Robert. I understand DMZ is semi-secure. The last article says two fire wall around DMZ - out-one and inner one.
Regards,
Ruilin