FortiGate Administration Guide - FirewallShop.com

Zone
System Network
Zone
You can use zones to group related interfaces and VLAN subinterfaces. Grouping
interfaces and VLAN subinterfaces into zones simplifies policy creation. If you
group interfaces and VLAN subinterfaces into a zone, you can configure policies
for connections to and from this zone, but not between interfaces in the zone.
You can add zones, rename and edit zones, and delete zones from the zone list.
When you add a zone, you select the names of the interfaces and VLAN
subinterfaces to add to the zone.
Zones are added to virtual domains. If you have added multiple virtual domains to
your FortiGate configuration, make sure you are configuring the correct virtual
domain before adding or editing zones.
Figure 47: Zone list
Zone settings
Create New
Name
Block intra-zone
traffic
Go to System > Network > Zone to configure zones. Select Create New or select
the Edit icon for a zone to modify that zone.
Figure 48: Zone options
Select Create New to create a new zone.
The names of the zones that you have added.
Displays Yes if traffic between interfaces in the same zone is blocked
and No if traffic between interfaces in the same zone is not blocked.
Interface Members The names of the interfaces added to the zone. Interface names
depend on the FortiGate model.
Edit/View icons Edit or view a zone.
Delete icon Delete a zone.
Name
Block intra-zone
traffic
Enter the name to identify the zone.
Select Block intra-zone traffic to block traffic between interfaces or
VLAN subinterfaces in the same zone.
Interface members Select the interfaces that are part of this zone. This list includes
configured VLANs.
FortiGate Version 3.0 MR5 Administration Guide
98 01-30005-0203-20070830