Mission Logs

Because it is itself a zone with a controlled boundary, every improvement developed over time for the classic perimeter (gateways, proxies, better firewalls) can also be used at the DMZ perimeter. Since the services offered on the internet are overwhelmingly web-based, the gatewa...

Quiz: CSARCH / DMZ and Web Application Firewall | updated: Oct 22, 2026

Akamai as a cloud WAAP provider; Imperva as a web application firewall / WAAP; AWS WAF for websites and APIs; Azure Web Application Firewall; Google Cloud Armor WAF. The list spans the deployment variants: Akamai is a content-delivery network that filters traffic at its edge befo...

Quiz: CSARCH / DMZ and Web Application Firewall | updated: Oct 22, 2026

It sits in a DMZ of F between the internet and the Citrix servers. It converts the special Citrix desktop protocol (ICA) to and from HTTPS and adds better authentication via an identity provider (IdP). The result is a multiple, improved perimeter security with an application gate...

Quiz: CSARCH / DMZ and Web Application Firewall | updated: Oct 22, 2026

Through content- and interaction-controlled paths: gateways, data-exchange platforms or data-exchange services with a suitable control function, so that the backend is reached through a checkpoint rather than directly. * The DMZ tiers and the internal zones meet only at one cont...

Quiz: CSARCH / Improved DMZ: LAMP and Blazor Case Studies | updated: Oct 22, 2026

An outdated stack (Linux, Apache, MySQL and PHP all affected) with missing security patches, weak passwords and passwords stored in configuration files for technical accounts, open ports of unknown status, old and weak cryptography, no security software such as anti-virus or intr...

Quiz: CSARCH / Improved DMZ: LAMP and Blazor Case Studies | updated: Oct 22, 2026

A group of gateways whose focus is protection. Built on a proxy or reverse proxy, it breaks the connection between client and server and examines not only the connection data (up to OSI layer 3) but also the content of the payload (from OSI layer 4 upward). Because that content d...

Quiz: CSARCH / DMZ and Web Application Firewall | updated: Oct 22, 2026

A WAF is no substitute for a properly built, robust and secure web application. It filters what it recognises, under the limits of its rule set and its configuration, so studying the peculiarities and limits of the specific WAF in depth is strongly recommended. A WAF is a filter...

Quiz: CSARCH / DMZ and Web Application Firewall | updated: Oct 22, 2026

It lets F keep working with its legacy system over modern access paths. The protection is limited by the outdated technology still in use, but the extensions followed a sound rule: the less secure the environment, the more securable and up to date the systems used there. The most...

Quiz: CSARCH / DMZ and Web Application Firewall | updated: Oct 22, 2026

Connecting the DMZ to the backend without further controls, for example by synchronising the DMZ database directly with the internal database. This creates an uncontrolled passage between the DMZ and the perimeter of the backend systems, so whatever compromises the DMZ can flow s...

Quiz: CSARCH / Improved DMZ: LAMP and Blazor Case Studies | updated: Oct 22, 2026

Poor maintenance with missing updates; the know-how lies with the external provider who built it, so there is no internal knowledge and there are no internal developers; and development and production are possibly not separated. These problems explain why the technical ones exist...

Quiz: CSARCH / Improved DMZ: LAMP and Blazor Case Studies | updated: Oct 22, 2026