the default dmz server feature is helpful when using some online games and videoconferencing applications that are incompatible with nat. the firewall is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. in some cases, one local pc can run the application properly if that pc’s ip address is entered as the default dmz server.

    when you need to assure secure network services, do not use the default dmz server feature. when a computer is designated as the default dmz server, it loses much of the protection of the firewall, and is exposed to many exploits from the internet. if compromised, the computer can be used to attack your network.

    incoming traffic from the internet is normally discarded by the firewall unless the traffic is a response to one of your local computers or a service that you have configured in the ports menu. instead of discarding this traffic, you can have it forwarded to one computer on your network. this computer is called the default dmz server.

    to assign a computer or server to be a default dmz server:

    1.click default dmz server.

    2.type the ip address for that server.

    3.click apply.