can 2 interfaces have same security zone at the same time?

[SThatipelly]

Will Firewall let me configure same security zone to 2 interfaces but make a decision to egress the traffic based on the route table? 

TIA.

[raji_toor · Accepted solution]

Yes you can have multiple interfaces in same zone, and each interface will have different IP subnet. You would also need intrazone policies to make it work.

[OtakarKlier]

Hello,

Are you replacing the 5020's? If yes, there are simpler ways to put in the new 5220's.

Please advise,

[SThatipelly]

@raji_toor Thanks. I am not looking to have 2 interfaces up and running at same time. I just want to have 2 interfaces in same zone for seamless cutover. I would think that doesn't create any issues during the cutover. ?? 

[SThatipelly]

@OtakarKlier No, I am not replacing 5020s. I am inserting a pair of 5220s behind the 5020s.

[OtakarKlier]

Hello,

Interesting, just curious as to what led to this design? More personal interest than anything.

Cheers!

[SThatipelly]

@OtakarKlier  to achieve True DMZ setup. 

[OtakarKlier]

Cool. Hope everything works well for you. Let us know if you more questions and we can provide advice.

Cheers!

[SThatipelly]

@OtakarKlier   I was able to successfully implement the firewalls yesterday. Thanks all for your help. cheers 🙂

[OtakarKlier]

Cheers! Glad you got it going.