Predefined Zones

The predefined zones on your firewall depend on the device. The predefined security zones on the Dell SonicWALL Security Appliance are not modifiable and are defined as follows:

•	DMZ: This zone is normally used for publicly accessible servers. This zone can consist of one to four interfaces, depending on you network design.

•	LAN: This zone can consist of multiple interfaces, depending on your network design. Even though each interface will have a different network subnet attached to it, when grouped together they can be managed as a single entity.

•	MGMT: This zone is used for appliance management and includes only the MGMT interface. Interfaces in other zones can also be enabled for SonicOS management, but the MGMT zone/interface provides the added security of a separate zone just for management.

•	MULTICAST: This zone provides support for IP multicasting, which is a method for sending IN packets from a single source simultaneously to multiple hosts.

•	SSLVPN: This zone is used for secure remote access using the Dell SonicWALL NetExtender client.

•	VPN: This virtual zone is used for simplifying secure, remote connectivity.

•	WLAN: This zone provides support to SonicWALL SonicPoints. When assigned to the Opt port, it enforces SonicPoint Enforcement, automatically dropping all packets received from non-SonicPoint devices. The WLAN zone supports the following:

•	SonicPoint Discovery Protocol (SDP) to automatically poll for and identify attached SonicPoints

•	SonicWALL Simple Provisioning Protocol to configure SonicPoints using profiles

•	Wireless and guest service configurations

•	WAN: This zone can consist of multiple interfaces. If you’re using the security appliance’s WAN failover capability, you need to add the second Internet interface to the WAN zone.

NOTE: Even though you may group interfaces together into one security zone, this does not preclude you from addressing a single interface within the zone.