https://live.paloaltonetworks.com/t5/expedition-discussions/interface-zone-and-vsys-policies-migration/m-p/255891#M1330 <P>Hi all,</P> <P>&nbsp;</P> <P>One of our customer move from Checkpoint to Palo Alto (single VSYS and two zones).</P> <P>The idea now is to split the network multiple zone and multiple VSYS (5).</P> <P>I would like to use the 'Auto zone Assign' features so Expedition will calculate the source zone and destination zone automatically.</P> <P>For the moment, if I move one interface from one zone to another zone and select 'Auto zone Assign', the rulebase remains unchanged...</P> <P>&nbsp;</P> <P>Regards,</P> <P>&nbsp;</P> <P>HA</P> Wed, 03 Apr 2019 13:15:00 GMT slp-security 2019-04-03T13:15:00Z https://live.paloaltonetworks.com/t5/expedition-discussions/interface-zone-and-vsys-policies-migration/m-p/255891#M1330 <P>Hi all,</P> <P>&nbsp;</P> <P>One of our customer move from Checkpoint to Palo Alto (single VSYS and two zones).</P> <P>The idea now is to split the network multiple zone and multiple VSYS (5).</P> <P>I would like to use the 'Auto zone Assign' features so Expedition will calculate the source zone and destination zone automatically.</P> <P>For the moment, if I move one interface from one zone to another zone and select 'Auto zone Assign', the rulebase remains unchanged...</P> <P>&nbsp;</P> <P>Regards,</P> <P>&nbsp;</P> <P>HA</P> Wed, 03 Apr 2019 13:15:00 GMT https://live.paloaltonetworks.com/t5/expedition-discussions/interface-zone-and-vsys-policies-migration/m-p/255891#M1330 slp-security 2019-04-03T13:15:00Z https://live.paloaltonetworks.com/t5/expedition-discussions/interface-zone-and-vsys-policies-migration/m-p/256004#M1333 <P>I just tested this on ver 1.1.11 and moving an interface to a different zone, then running the Auto Zone Assign reassigned the interfaces in the security policies.</P> Wed, 03 Apr 2019 22:22:36 GMT https://live.paloaltonetworks.com/t5/expedition-discussions/interface-zone-and-vsys-policies-migration/m-p/256004#M1333 sjanita 2019-04-03T22:22:36Z