Security Zone

[ssan239]

Hi All,

Can we add 2 interfaces to the same Security zone?

Regards,

Sanjay S

[Rob Ingram]

@ssan239 yes you can add multiple interfaces to the same security zone.

[Karsten Iwen]

Yes, that is possible. And if you talk about what you want to achieve, there will likely be some hints of whether that is a good idea or not.

[ssan239]

Hi @Karsten Iwen @Rob Ingram Thanks both for quick response.

We are configuring the new DMZ interface on FTD. Already we have DMZ security Zone and an interface 1(example) is added. Now is it possible to add interface 2 to the same Security Zone. 

Also can i add it to the same Interface group as the old DMZ interface 1?

Regards,

Sanjay S

[Karsten Iwen]

Is the new DMZ similar to the given one so that you will share the configuration between them? Then, adding the new DMZ to the given zone is likely ok. If they are quite different, like one DMZ for Web and one DMZ for Mail, then I would use a separate zone.

And what do you want to use the interface groups for?

[ssan239]

Thanks you @Karsten Iwen 

I think i understood better now