The server and the user machines are within the organization firewall. No user is expected to access the system outside the firewall through a Web browser.
The server is within the organization firewall. It has a protected public IP interface that the users outside the firewall can use to access the data by using a VPN client or other secure means.
The server is in the public domain, and the users can access the server data from anywhere, including Internet kiosks.