FTD Question

[N3om]

Hi

Is it ok to have two interfaces in different security zones in the same vrf, So traffic comes in on a sub-interface in security zone(visitors) then egresses through a RB VPN  VTI in security zone(guest-inet) is this ok or should i be doing it a different way??

Thanks

[Rob Ingram]

@N3om yes, two interfaces in two different zones should be fine, even in the same vrf. I assume this vrf is for visitors/guest traffic and segmented from your normal corporate traffic, so that would be secure.

[N3om]

@Rob Ingram Yes its guest and is segregated, Is it best practice to have source and destination interfaces in the same security zone then.??

Thanks

[Rob Ingram · Accepted solution]

@N3om no, I would recommend using different zones for each interface.