diff options
author | srividya0208 <a.srividya@vyos.io> | 2023-09-04 02:13:54 -0400 |
---|---|---|
committer | srividya0208 <a.srividya@vyos.io> | 2023-09-04 02:49:17 -0400 |
commit | 54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9 (patch) | |
tree | 048b25a5e03da4b249bdde325b6841340358eaac /docs/configuration/firewall | |
parent | eeefebfbe0c44ccd0e9003055871044045ac424a (diff) | |
download | vyos-documentation-54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9.tar.gz vyos-documentation-54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9.zip |
correction of ipsec compression syntax and added a reference
for changes done for zone based firewall
Diffstat (limited to 'docs/configuration/firewall')
-rw-r--r-- | docs/configuration/firewall/zone.rst | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/docs/configuration/firewall/zone.rst b/docs/configuration/firewall/zone.rst index 403de912..6afd47e9 100644 --- a/docs/configuration/firewall/zone.rst +++ b/docs/configuration/firewall/zone.rst @@ -6,13 +6,14 @@ Zone Based Firewall ################### -.. note:: **Important note:** - This documentation is valid only for VyOS Sagitta prior to - 1.4-rolling-YYYYMMDDHHmm +.. note:: For latest releases, refer the `firewall + <https://docs.vyos.io/en/latest/configuration/firewall/general.html#interface-groups>`_ + main page to configure zone based rules. New syntax was introduced here + :vytask:`T5160` In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to -firewall rules. A Zone is a group of interfaces that have similar functions or +firewall rules. A zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network. @@ -40,7 +41,7 @@ firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs. -An basic introduction to zone-based firewalls can be found `here +A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`. |