This graphic shows the basic security architecture: the portal and image server are in the DMZ with firewall protecting them from users and from all other Oracle WebCenter components that are available through the intranet.