Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=ZoneManage

Zones

A zone is a grouping of interfaces. Zones also specify the services you can use to administer devices and authenticate users. When used with firewall rules, zones provide a convenient method of managing security and traffic for a group of interfaces.

Name Description
LAN Groups interfaces with different network subnets so that you can manage them as a single entity. By default, traffic to and from this zone is blocked. To allow traffic between two LAN zone interfaces, you must add a LAN to LAN firewall rule.
DMZ (De-militarized zone) Typically used for publicly accessible server networks such as web servers.
WAN Used for all interfaces with a default gateway. Most likely used for internet access.
VPN Automatically created interfaces used by IPsec or SSL VPN connections. When a VPN connection is created, the interface used by the connection is automatically added to this zone.
WiFi Used for wireless internet services when a separate zone is configured. Bridge to AP LAN and Bridge to VLAN won't use a dedicated interface.