keep security zone on FMC

[Ben Ss]

Hi CISCO DEV team

Can we please keep security zone under objects on FMC?

before I upgraded to 7.4.2, There was security zone under objects on FMC, later, you give it a new name "interface" instead of security zone. you make things complicated. it was not good.

[Marvin Rhoads]

Zones have not gone away. They are integral to FTD Access Control Policies. They should also not have been lost as part of any upgrade. I have upgraded dozens of FTDs without encountering this behavior. I suggest you open a TAC case for investigation.

[Aref Alsouqi]

As you can see on the screenshot you shared in that Interface section you have both the security zones as well as the interfaces groups. Just as a side note apart from the name change, depending on what you are configuring, you might need to use security zones or interface groups. For instance if you are configuring NetFlow on the FMC platform settings policies, then the only option to use when you configure the collecotrs would be the interface groups. More about this here in the following link:

Security Zones and Interface Groups

[Marvin Rhoads · Accepted solution]

Further, zones and interfaces groups have always been listed under Interface objects. Here is a link to the 7.0 documentation confirming the same:

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/reusable_objects.html?bookSearch=true#concept_0E473FB2A86E477295C7EAB9F7CECDD7

...and from 6.2.3:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/reusable_objects.html?bookSearch=true#ID-2243-000009b4

[Ben Ss]

Thank you.