Security zones

kunal-united — Mon, 11 Mar 2019 21:55:32 GMT

Hi,

ASA

Outside zone: Internet (213.132.x.x)

DMZ: 192.168.168.1/24

Inside: 10.0.0.1/24

Router: 10.0.0.254/24

Now I have a route 172.16.1.0/24 on the ASA saying the next-hop for 172.16.1.0/24 is the router ip 10.0.0.254?

Will 172.16.1.0/24 be counted as a high security zone ?

So what my understanding is that a route (172.16.1.0/24) or connected subnet (10.0.0.1/24) ...they are counted as high security zones?

Am I correct? or is it just 10.0.0.0/8 is the high security zone and not 172.16.1.0/24.

Thanks

Security zones

Julio Carvajal — Sun, 27 Nov 2011 06:14:15 GMT

Hello Kunal,

The ASA will now in order to get to that subnet will need to go into the inside interface wich is the high security zone, so by default is going to be count as a high security network.

Please rate helpful posts.

Regards,

Julio

topic Security zones in Network Security

Security zones

Security zones