Firewall Zone Policy
Security
Overview
Zone policies group interfaces/resources and define which traffic can cross boundaries. Default deny with explicit service allowances supports least privilege. Return state may be handled by a stateful engine. This lesson separates zone authorization from the legacy topology basic rule model.
Protocol stages
- 1Source zone
- 2Destination zone
- 3Service
- 4Policy decision
Interactive exercise
Knowledge check
Guest→Management SSH has no explicit allowance under default deny. Decision?
Educational model — not real hardware, traffic or official certification.