Question: can dmz access internal network?
Answer: Demilitarized Zone (DMZ) Hosts in the DMZ can communicate with both the internal and external network, but communications with internal network hosts is tightly restricted. The DMZ is isolated using a security gateway (i.e. firewall) to filter traffic between the DMZ and the private network.