Titan DMZ is placed outside the firewall while the Titan MFT Server, data, configuration and other sensitive information lives inside. Cornerstone opens a single outbound encrypted connection to the Titan DMZ Server which then listens for client connections on behalf of the Cornerstone Server.

This configuration allows for 100% of the inbound ports on the firewall to be locked down, while still allowing secure file transfer to occur.