In computer security is a layered model that helps subnetwork segmentation based on security requirements and policy. Delimitates the perimeters in a network area, making a difference between internal and external networks. It also provides a transit mechanism from an insecure source to an internal destination, sometimes called a screened subnet.