FTD Intra-ZOne

[ranga83]

Hi,

We have an FTD 3110 Active/Passive cluster with a requirement to group 30 network interfaces (sub-interfaces) into 3 zones, with traffic controls for both intra-zone and inter-zone traffic.

For example, intra-zone traffic would involve traffic between VLAN 10 and VLAN 100 within the "Test1_Zone."

Please refer diagram

Are there any limitations on the number of interfaces that can be assigned to a single security  zone?

[Marius Gunnerud]

Configuration wise there is no limitation.  However, at some point you will reach a resource limitation with regard to memory, Throughput and Inspection (IPS).  I have not found any documentation that states where or when this limitation might be reached.

[MHM Cisco World]

For example, intra-zone traffic would involve traffic between VLAN 10 and VLAN 100 within the "Test1_Zone." <<- this inter Zone  not intra Zone 

Good design

for internal you can put all internal subnet in one Zone

and put the Server into different zone, these server is access from outside zone 

MHM

[ccieexpert]

there is a sub-interface limit, you will reach that first.. the sub interface limit is per platform.

The max to a zone I dont see an issue as max is 1024 sub interfaces + interfaaces.. What is the maximum you are trying to accomplish ?