topic Re: Security Zone Configuration in Firewall and Security Management

Security Zone Configuration

Dor_Marcovitch — Wed, 02 Feb 2022 12:21:39 GMT

Hey,

i couldn't understand from documentation:

1) can i configure security zones only on part of the interfaces of a FW

2) on a single rule can i mix network objects and security zones?

thanks

dor

Re: Security Zone Configuration

Chris_Atkinson — Wed, 02 Feb 2022 12:45:32 GMT

Correct "Zones" are applied to an interface/s within the gateway topology.

When you say mix to do you mean also within the same source/destination columns?

Refer also: sk128572

Re: Security Zone Configuration

the_rock — Wed, 02 Feb 2022 13:14:55 GMT

For ? number 1, answer is yes and for ? number 2, its yes, but I believe only if you are referring to parent layered rule, not sure if it might work correctly if you try do it in "child"rules of that layer. I will try it in lab and see if it passes verification. Honestly, I would not bother with it, because as long as your parent layered rule contains right zone, that's what matters the most.

Re: Security Zone Configuration

the_rock — Wed, 02 Feb 2022 13:22:32 GMT

Ok, I stand corrected, I was wrong...yes, you can also mix and match in "child" rules. See basic example I did in attached screenshot. This is all R81.10 (gw and mgmt server), but I also tried in older version, worked fine!

Andy

Re: Security Zone Configuration

Dor_Marcovitch — Thu, 03 Feb 2022 12:30:35 GMT

thanks, that worked for me also when only part of the interfaces are "attached" to a security zone.