Cisco's PIX Firewall creates a DMZ using three interfaces that have been installed on the firewall. The three interfaces are for:

  • the unprotected network,
  • the DMZ,
  • the protected network

To gain access to the internal network, the intruder must break all three interfaces of the Cisco PIX Firewall.