1
00:00:07,450 --> 00:00:18,190
So our next topic is zones a zone is a way to group different interfaces interfaces that don't have

2
00:00:18,190 --> 00:00:28,450
any references such as firewall policies and grouped them together into a logical zone a logical zone

3
00:00:28,450 --> 00:00:33,220
that will be used later on in our policy configuration.

4
00:00:33,220 --> 00:00:36,760
It will make things much simpler.

5
00:00:36,880 --> 00:00:44,400
So currently we have only internal 5 that is dedicated to our marketing lab.

6
00:00:44,980 --> 00:00:57,640
Let's add up another report and dedicated to the finance line which is another segment of our network.

7
00:00:57,760 --> 00:00:58,730
All right.

8
00:00:58,750 --> 00:01:01,010
And let's define it as a line.

9
00:01:01,660 --> 00:01:12,060
Let's give it the IP address of 10 that zero dot for that one on the 24 subnet.

10
00:01:12,160 --> 00:01:19,720
Let's allow ping and S&P and the ACP server we know that we currently have only 15 employees.

11
00:01:19,720 --> 00:01:27,390
So we'll allocate 20 IP addresses for that segment.

12
00:01:27,510 --> 00:01:31,060
Deflate gate which stays the same DNS service stays the same.

13
00:01:31,060 --> 00:01:36,270
We can enable device detection with active scanning.

14
00:01:36,310 --> 00:01:43,090
Now once we do it we have two different interfaces.

15
00:01:43,090 --> 00:01:45,640
One is dedicated to the marketing line.

16
00:01:45,640 --> 00:01:48,770
The second one is dedicated to the finance line.

17
00:01:48,790 --> 00:01:55,070
Now we can create a new zone we will name it unified land.

18
00:01:55,160 --> 00:02:04,040
We can also name it DMC or whatever and we'll set up the members of that zone which are marketing and

19
00:02:04,040 --> 00:02:05,410
finance plan.

20
00:02:05,720 --> 00:02:15,890
And once we do it we will see that we have any new logical interface in our interfaces pain that is

21
00:02:16,730 --> 00:02:24,920
the unified land which includes internal 5 and internal 6 marketing and finance.

22
00:02:24,920 --> 00:02:35,630
We can use that zone in our policy configuration to configure one unified policy that all members of

23
00:02:35,630 --> 00:02:39,920
the marketing and finance plan will have to obey.