NXC Series User’s Guide
186
CHAPTER 11
Zones
11.1 Overview
Set up zones to configure network security and network policies in the NXC. A zone is a group of
interfaces. The NXC uses zones instead of interfaces in many security and policy settings, such as firewall
rules. Zones cannot overlap. Each interface can be assigned to just one zone.
11.1.1 What You Can Do in this Chapter
The Zone screens (see Section 11.2 on page 187) manage the NXC’s zones.
11.1.2 What You Need to Know
The following terms and concepts may help as you read this chapter.
Effects of Zones on Different Types of Traffic
Zones effectively divide traffic into three types--intra-zone traffic, inter-zone traffic, and extra-zone
traffic--which are affected differently by zone-based security and policy settings.
Intra-zone Traffic
• Intra-zone traffic is traffic between interfaces in the same zone.
• In each zone, you can either allow or prohibit all intra-zone traffic.
• You can also set up firewall rules to control intra-zone traffic, but many other types of zone-based
security and policy settings do not affect intra-zone traffic.
Inter-zone Traffic
Inter-zone traffic is traffic between interfaces in different zones.
Extra-zone Traffic
• Extra-zone traffic is traffic to or from any interface that is not assigned to a zone.
• Some zone-based security and policy settings may apply to extra-zone traffic, especially if you can
set the zone attribute in them to Any or All. See the specific feature for more information.
To Next Page
Loading...
