Bastion Host

• Exposed gateway is called the bastion host

• Sits in the DMZ

• Usually a platform for an application or circuit level gateway

• Hardened, trusted system

• Only essential services