Integration Server and Enterprise Gateway Server
Integration Server is a run-time server that hosts Mediator and executes its services.
In an SOA or API management system, Integration Server sits behind an internal firewall and is not allowed to directly interact with external clients through the DMZ. Instead, another Integration Server in your DMZ, called an Enterprise Gateway Server, acts as an intermediary between external clients and the internal Integration Server, Mediator, and API-Portal. The Enterprise Gateway Server protects these products and their applications, services, and data, from malicious attacks from external client applications. Administrators can secure traffic between service and API consumer requests and the execution of services on Mediator by:
Filtering requests from and blacklisting specified IP addresses.
Detecting and filtering requests from mobile devices.
Avoiding additional inbound firewall holes.
Define custom rules that call a Flow service to perform custom processing within the
Enterprise Gateway Server (for example, authentication and authorization).