Global Zones / Rules

[R.Naylor]

We want to create some standards rules that will apply to most zones - It looks like the only way to do this is to define all zones that needs these rules at a global level.  

Looks like maybe tagging could be used  as an alternative to allow zones to be defined at a folder level, but this seems overly complex

[reaper]

have you tried using Zone Mapping (from the Overview > Inherited Zones)

you can add all your internal zones to the Trust zone so you can make a rule that allows trust to anywhere which will include all your zones

[R.Naylor]

Thanks  - I've had a look at this and it appears this is for Prisma access?

We are currently focusing on device level, rather than user level protections to segment high risk area of our network off or area that are critical and need extra protection.

For example we have a rule to allow access to Microsoft Defender for Endpoint or the SIEM system that we want to be able to apply to multiple segmented area of the network, each segment is current in its own zone, with some of the zones been defined at a subfolder level.

From what I can see the best fix would be to define the zones at the root level so they can be used in root level config.

As we don't have Prisma it does not look like we can use the trust/untrusted functionality, nor does it appear to be in any of the mneus