User's Manual

ISG50 User’s Guide 313
CHAPTER 16
Zones
16.1 Zones Overview
Set up zones to configure network security and network policies in the ISG50. A zone is a group of
interfaces and/or VPN tunnels. The ISG50 uses zones instead of interfaces in many security and
policy settings, such as firewall rules and remote management.
Zones cannot overlap. Each Ethernet interface, VLAN interface, bridge interface, PPPoE/PPTP
interface and VPN tunnel can be assigned to at most one zone. Virtual interfaces are automatically
assigned to the same zone as the interface on which they run.
Figure 207 Example: Zones
16.1.1 What You Can Do in this Chapter
Use the Zone screens (see Section 16.2 on page 314) to manage the ISG50’s zones.
16.1.2 What You Need to Know
Effects of Zones on Different Types of Traffic
Zones effectively divide traffic into three types--intra-zone traffic, inter-zone traffic, and extra-zone
traffic--which are affected differently by zone-based security and policy settings.
ISG