Skip to main content
Behzadawesome
Behzadawesome
New Member
June 30, 2020
Question

Fortigate zone/interface level policy

  • June 30, 2020
  • 1 reply
  • 2008 views

Hi all,

 

Is there any functional difference between using zones in policies rather than the direct interface itself in the policies?

Using zone has the transparency layer of changing the underlying interface.

 

Regards

 Behzad

    1 reply

    emnoc
    emnoc
    New Member
    June 30, 2020

    None from a functional. If you have hundred of interfaces , a zone might be beneficial if you need to group similar policy. Just keep in mind if you ever need interface label policy and have zones you can NOT do that. BUT you can  still wrote specific policy with src/dst zone and src/dst address to that level of granular

     

    FWIW I hardly use zones unless it's for VPN tunnels.

     

    Ken Felix

    Terms & ConditionsAccessibility statement
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.