Editing DMZ (computing) (section)

===Single firewall===
[[File:DMZ network diagram 1 firewall.svg|thumb|right|200px|Diagram of a typical three-legged network model employing a DMZ using a single firewall.]]

A single firewall with at least 3 network interfaces can be used to create a network architecture containing a DMZ. The external network is formed from the [[ISP]] to the firewall on the first network interface, the internal network is formed from the second network interface, and the DMZ is formed from the third network interface. The firewall becomes a single point of failure for the network and must be able to handle all of the traffic going to the DMZ as well as the internal network.
The zones are usually marked with colors -for example, purple for LAN, green for DMZ, red for Internet (with often another color used for wireless zones).