Internet services are placed in protected screened subnets, which represent a border between the private LAN and the public Internet. Traffic to and from this zone is strictly filtered and monitored. Network border services provide Internet access for employees, email and communications, remote access and WAN branch office links via virtual private networks (VPNs), and web services for external clients and customers.