Use a "demilitarized zone" (DMZ) to provide external access

Milestone recommends that you install XProtect Mobile server in a DMZ, and on a computer with two network interfaces:

• One for internal communication
• One for public Internet access

This allows mobile client users to connect to Milestone Mobile server with a public IP address, without compromising the security or availability of the VMS network.

Learn more

The following control(s) provide additional guidance:

• NIST SP 800-53 SC-7 Boundary Protection