The entire Internet, including clients, is outside Firewall-1. All network communication between the Internet and the installed application passes through Firewall-1. Within Firewall-1 is the DMZ and several processor boxes. Firewall-2 separates the DMZ from the corporate Intranet. All communication between the DMZ and the corporate Intranet passes through Firewall 2.