Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=network-zones-add

Add a zone

  1. Go to Network > Zones and click Add.
  2. Enter a name.

  3. Specify a type.

    Option Description
    LAN Groups interfaces with different network subnets so that you can manage them as a single entity. By default, traffic to and from this zone is blocked. To allow traffic between two LAN zone interfaces, you must add a LAN to LAN firewall rule.
    DMZ Typically used for publicly accessible server networks, such as web servers.
    Tip: Additionally, HA interfaces must be placed in this zone.

  4. Specify services to be allowed by this zone.

  5. Click Save.