A physical or logical network buffer zone that sits between an industrial control system (ICS) and the enterprise network to prevent direct communication and enhance security. It acts as a controlled gateway to protect sensitive production infrastructure from external cyber threats.