VLAN in Zone disables GUI editing of parent interface
We have a configuration running on 5.4.9 on a 100E with networks on physical ports and VLANs like this:
+-----------+
| port1 | 10.0.0.1/24
+-----------+
| +-----------+
+-->| vlan1 | 10.0.1.1/24
+-----------+
+-----------+
| port2 | 10.0.2.1/24
+-----------+
I would like to create a zone that includes vlan1 and port2 (but not port1) as these two should have identical policies applied to them.
I can create this zone, but as soon as I include vlan1 the GUI shows it in the Zone segment of the interfaces view as you would expect, but it is still shown as a child of port1. However, port1 is greyed out and disabled (I assume b/c it is not part of this zone). I can no longer open the view of port1 for editing, turning the port down, etc....
If I create a second vlan2 as a child of port1 and add only one of the vlans to the zone then port1 appears both in the zone section and the physical section with the latter able to be edited/disabled/etc....
Am I misunderstanding zones or doing something wrong here? I have made edits in the CLI that work, so this seems like perhaps a bug. Does anyone know if later releases display this issue (particularly 5.4.11)?
Thank you.