This graphic has on the left the label "Untrusted Clients" bounded by a dotted line. To its right is a "Firewall". To the right is a column of two-sectioned boxes labeled "HTTP Server" and "Proxy plug-in". This column of boxes is labeled "Web Layer" and is surrounded by a dotted line labeled "DMZ". To the right of this column is a column of boxes labeled "Servlet/Object Cluster". Each box contains the labels "JSP", "Servlet", "EJB", and "JDBC". To the right of this column is a Database.

Clients point to each of the HTTP Servers through the Firewall with three arrows. The Proxy plug-ins point to each of the boxes in the Servlet/Object Cluster and then to the Database.