Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • SD-WAN Deployment for MSSPs

    Home FortiGate / FortiOS 7.2.0 SD-WAN Deployment for MSSPs
    7.2.0
    7.4.0
    7.2.0
    7.0.0
    6.4.0

    System zones

    System zones

    By default, to simplify and generalize Firewall Policy configuration, the Jinja Templates generate the following System Zones:

    • lan_zone groups all the LAN interfaces

    • hub2hub_overlay groups all the Hub-to-Hub tunnels within and between the regions

    We will demonstrate the use of these zones in Preparing Provisioning Templates for projects.

    Note that when implementing segmentation over single overlay (see Segmentation over single overlay), two additional System Zones are generated: vrfs_leak_zone and pevrf_leak_zone. These zones group the inter-VRF links used for Internet access.

    Note

    All the generated System Zones are optional. This functionality can be controlled using optional variables. See the full Project Template reference in the GitHub repository for more details.
    Previous
    Next

    System zones

    System zones

    By default, to simplify and generalize Firewall Policy configuration, the Jinja Templates generate the following System Zones:

    • lan_zone groups all the LAN interfaces

    • hub2hub_overlay groups all the Hub-to-Hub tunnels within and between the regions

    We will demonstrate the use of these zones in Preparing Provisioning Templates for projects.

    Note that when implementing segmentation over single overlay (see Segmentation over single overlay), two additional System Zones are generated: vrfs_leak_zone and pevrf_leak_zone. These zones group the inter-VRF links used for Internet access.

    Note

    All the generated System Zones are optional. This functionality can be controlled using optional variables. See the full Project Template reference in the GitHub repository for more details.
    Previous
    Next