Question: the dmz can be a dedicated port?
Answer: The DMZ can be a dedicated port on the firewall device linking a single bastion host, or it can be connected to a screened subnet. A Web server is often exposed to higher levels of risk when placed in the DMZ than when it is placed in the untrusted network. First generation firewalls are application-level firewalls.