Bastion Host

• Allows access only to specific hosts

• Maintains detailed audit information by logging all traffic

• Choke point for discovering and terminating intruder attacks

• Each proxy is a small, highly secure network software package that is a subset of the general application