If you'll forgive a fundamental question, what's a DMZ and why might I
want one? My understanding is the BM provides an effective DMZ,
essentially between its public and private NIC, a "demilitarized zone"
through which only things with permission may pass. Why might I want
something other than all my workstations connected to the private NIC
and the Internet to the public?

Thanks in advance. Links to read are welcomed, but a short explanation
here would be great as well.