Yes. The web server that provides the application can be accessed from the Internet and is located behind a firewall in a demilitarized zone. This protects it against attack from the Internet.