Configuring zones System Network
FortiGate Version 4.0 MR1 Administration Guide
198 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
For more information, see config system switch-interface in the FortiGate CLI Reference.
See also
Configuring zones
Grouping interfaces and VLAN subinterfaces into zones simplifies policy creation. You can
configure policies for connections to and from a zone, but not between interfaces in a
zone.
You can add zones, rename and edit zones, and delete zones from the zone list. When
you add a zone, you select the names of the interfaces and VLAN subinterfaces to add to
the zone.
Zones are configured from virtual domains. If you have added multiple virtual domains to
your FortiGate configuration, make sure you are configuring the correct virtual domain
before adding or editing zones.
Figure 82: Zone list
To configure zone settings
1 Go to System > Network > Zone.
2 Select Create New or select the Edit icon for a zone.
3 Select name, and interfaces.
4 Select OK.
Figure 83: Zone settings
Create New Select to create a new zone.
Name Names of the zones.
Block intra-zone
traffic
Displays Yes if traffic between interfaces in the same zone is blocked and No
if traffic between interfaces in the same zone is not blocked.
Interface Members Names of the interfaces added to the zone. Interface names depend on the
FortiGate model.
Edit/View icons Edit or view a zone.
Delete icon Delete a zone.