How to check what zone a subnet belongs to?

[nickleung]

Is there anyway to check what zone a subnet belongs in if there are multiple zones on the firewall?

Preferably through the GUI?

[Mudhireddy]

Yes, you can check the IP subnets and interfaces of the zone very quickly in web UI.

 Just follow as per screenshot steps.

[nickleung]

Thanks for the response, I should have given more detail. If for example I am making a rule using new objects (hosts, networks, etc.) that I have just created, what is the best way to determine what zone I should select for them in the rule?

Do I just check if the IP address of the object belongs in any of the ranges of each zone on the Interfaces tab?

[OtakarKlier]

Hello,

Yeah its one of those things you have to understand your network to determine which zone and network the host lives in. 

Hope that makes sense.

[michelealbrigo]

Supposing you don't know that, for whatever reason, and you just can access the firewall, I'd say:

• Network > Virtual Router > More runtime stats > Routing Table, find the route and get the interface type.number for that specific destination
• Network > Interfaces > Type > Number, and get the assigned zone for the interface you got at the previous step

Of course, knowledge of your network, as said by others, is always a good and healthy thing to have, when managing a firewall.