This article gives a basic explanation of what a Zone is and how to configure them on the Sophos Firewall. The following sections are covered:
Applies to the following Sophos products and versions Sophos Firewall
A zone is one or more virtual or physical interfaces that have been combined in a group. This collection of interfaces usually represents a segment of the network that has the same security policy requirements. This allows an administrator to easily apply policy rules to all interfaces in a zone at once.
There are several types of default zones:
You may also create new zones; they will either be DMZ or LAN type.
When creating a new zone, you can determine what services will be running on that zone. You could have two LAN zones, for instance, one with no authentication enabled and another with NTLM authentication turned on.
Zones may be edited at any time to enable or disable the services listed below:
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.