topic Re: FTD Question in Network Security

FTD Question

N3om — Thu, 19 Feb 2026 12:15:34 GMT

Is it ok to have two interfaces in different security zones in the same vrf, So traffic comes in on a sub-interface in security zone(visitors) then egresses through a RB VPN VTI in security zone(guest-inet) is this ok or should i be doing it a different way??

Thanks

Re: FTD Question

Rob Ingram — Thu, 19 Feb 2026 12:23:28 GMT

@N3om yes, two interfaces in two different zones should be fine, even in the same vrf. I assume this vrf is for visitors/guest traffic and segmented from your normal corporate traffic, so that would be secure.

Re: FTD Question

N3om — Thu, 19 Feb 2026 13:34:45 GMT

@Rob Ingram Yes its guest and is segregated, Is it best practice to have source and destination interfaces in the same security zone then.??

Thanks

Re: FTD Question

Rob Ingram — Thu, 19 Feb 2026 13:37:58 GMT

@N3om no, I would recommend using different zones for each interface.