3 Zone-based Firewall

Question 1

What state they have and what is only allowed from outside network?

Answer 1

• stateful

- only replies to internal network are allowed

Question 2

What is a zone?

Answer 2

• logical area

- default - communication between two zones i not allowed

Question 3

What is a zone-pair?

Answer 3

• we define policies to the zone-pair
• unidirectional
• if we want bidirectional –> have to create another zone-pair ([A, B], [B, A])

Question 4

What is a self-zone?

Answer 4

• traffic destined for the router itself (regarldessly on which device has sent it)
• traffic from the R - traffic coming from self-zone (allowed by default)
• traffic to the R - traffic coming to self-zone (allowed by default)