A subnetwork that permits access from both untrusted external networks and from trusted internal networks, but does not permit traffic flow between the two.