topic Re: Security Zone in Network Security

Security Zone

ssan239 — Wed, 20 Sep 2023 12:54:32 GMT

Hi All,

Can we add 2 interfaces to the same Security zone?

Regards,

Sanjay S

Re: Security Zone

Rob Ingram — Wed, 20 Sep 2023 13:01:17 GMT

@ssan239 yes you can add multiple interfaces to the same security zone.

Re: Security Zone

Karsten Iwen — Wed, 20 Sep 2023 13:02:28 GMT

Yes, that is possible. And if you talk about what you want to achieve, there will likely be some hints of whether that is a good idea or not.

Re: Security Zone

ssan239 — Wed, 20 Sep 2023 13:38:07 GMT

Hi @Karsten Iwen @Rob Ingram Thanks both for quick response.

We are configuring the new DMZ interface on FTD. Already we have DMZ security Zone and an interface 1(example) is added. Now is it possible to add interface 2 to the same Security Zone.

Also can i add it to the same Interface group as the old DMZ interface 1?

Regards,

Sanjay S

Re: Security Zone

Karsten Iwen — Wed, 20 Sep 2023 13:48:39 GMT

Is the new DMZ similar to the given one so that you will share the configuration between them? Then, adding the new DMZ to the given zone is likely ok. If they are quite different, like one DMZ for Web and one DMZ for Mail, then I would use a separate zone.

And what do you want to use the interface groups for?

Re: Security Zone

ssan239 — Wed, 20 Sep 2023 14:27:11 GMT

Thanks you @Karsten Iwen

I think i understood better now 🙂