Configuring a Security Zone
This section describes how to configure a security zone.
Creating a Security Zone
To create a security zone, take the following steps:
- On the Navigation pane, click Configure > Network > Network to visit the Network page.
- Click New on the upper-left of the zone list.
- In the Zone Configuration dialog, type the name for the zone into the Name box.
- Specify a type for the security zone. For Layer 2 Zone, also select a VSwitch for the zone from the VSwitch drop-down list below.
- Bind interfaces to the zone. Select an interface/interfaces from the Available list, and click
to add to the Selected list.
- If needed, configure advanced properties in the Advanced section.
- APP identification: Select the Enable check box to enable APP identification for the zone.
- WAN zone: Select the Enable check box to set the zone to a WAN zone, assuring the accuracy of the statistic analysis sets that are based on IP data.
- NBT cache: Select the Enable check box to enable NetBIOS host query for the zone. For detailed instructions, see NBT Cache.
Editing/Deleting a Security Zone
To edit/delete a security zone, take the following steps:
- On the Navigation pane, click Configure > Network > Network to visit the Network page.
- Select the zone you want to edit/delete from the zone list, and click Edit/Delete on the upper-left of the list.
Notes:
- Pre-defined zones cannot be deleted.
- When changing the VSwitch to which a zone belong, make sure there is no binding interface in the zone.