SonicWALL TZ 180 Bedienungsanleitung PDF herunterladen (Seite 192)

Network > Zones

192

SonicOS Enhanced 4.0 Administrator Guide

tunnels, which is a feature that users have long requested. SonicWALL security appliances can

also drive VPN traffic through the NAT policy and zone policy, since VPNs are now logically

grouped into their own VPN zone.

How Zones Work

An easy way to visualize how security zones work is to imagine a large new building, with

several rooms inside the building, and a group of new employees that do not know their way

around the building. This building has one or more exits, which can be thought of as the WAN

interfaces. The rooms within the building have one or more doors, which can be thought of as

interfaces. These rooms can be thought of as zones inside each room are a number of people.

The people are categorized and assigned to separate rooms within the building. People in each

room going to another room or leaving the building, must talk to a doorperson on the way out

of each room. This doorperson is the inter-zone/intra-zone security policy, and the

doorperson’s job to consult a list and make sure that the person is allowed to go to the other

room, or to leave the building. If the person is allowed (i.e. the security policy lets them), they

can leave the room via the door (the interface).

Upon entering the hallway, the person needs to consult with the hallway monitor to find out

where the room is, or where the door out of the building is located. This hallway monitor

provides the routing process because the monitor knows where all the rooms are located, and

how to get in and out of the building. The monitor also knows the addresses of any of the remote

offices, which can be considered the VPNs. If the building has more than one entrance/exit

(WAN interfaces), the hallway monitor can direct people to use the secondary entrance/exit,

depending upon how they’ve been told to do so (i.e. only in an emergency, or to distribute the

traffic in and out of the entrance/exits). This function can be thought of as WAN Load Balancing.

There are times that the rooms inside the building have more than one door, and times when

there are groups of people in the room who are not familiar with one another. In this example,

one group of people uses only one door, and another group uses the other door, even though

groups are all in the same room. Because they also don’t recognize each other, in order to

speak with someone in another group, the users must ask the doorperson (the security policy)

to point out which person in the other group is the one with whom they wish to speak. The

doorperson has the option to not let one group of people talk to the other groups in the room.

This is an example of when zones have more than one interface bound to them, and when intra-

zone traffic is not allowed.

Sometimes, people will wish to visit remote offices, and people may arrive from remote offices

to visit people in specific rooms in the building. These are the VPN tunnels. The hallway and

doorway monitors check to see if this is allowed or not, and allow traffic through. The

doorperson can also elect to force people to put on a costume before traveling to another room,

or to exit, or to another remote office. This hides the true identity of the person, masquerading

the person as someone else. This process can be thought of as the NAT policy.

1 2 ... 187 188 189 190 191 192 193 194 195 196 197 ... 842 843

Kommentare zu diesen Handbüchern

BryanAbemy 07 Apr 2024 | 03:13:56

Hello! Crazy discounts, hurry up! We are Drop Dead Studio and our goal is to help companies achieve impressive sales results through automated marketing. I. We sell fresh databases for GSA Search Engine Ranker. • The databases are updated monthly through 24/7 parsing and by connecting purchased databases from other sources. • You have the option to purchase a one-time fresh database or pay for a lifetime subscription for updates. ATTENTION! 40% discount only until 04/10/2024! When ap

BryanAbemy 07 Apr 2024 | 03:16:14

BryanAbemy 07 Apr 2024 | 03:18:40

BryanAbemy 07 Apr 2024 | 03:20:48

BryanAbemy 07 Apr 2024 | 12:27:59

BryanAbemy 08 Apr 2024 | 08:54:19

BryanAbemy 08 Apr 2024 | 08:56:50

BryanAbemy 08 Apr 2024 | 08:59:01

BryanAbemy 08 Apr 2024 | 09:00:40

BryanAbemy 08 Apr 2024 | 23:09:31

BryanAbemy 08 Apr 2024 | 23:11:32

BryanAbemy 08 Apr 2024 | 23:13:08

BryanAbemy 08 Apr 2024 | 23:14:53

BryanAbemy 08 Apr 2024 | 23:16:48

BryanAbemy 09 Apr 2024 | 10:29:08

BryanAbemy 09 Apr 2024 | 10:31:50

BryanAbemy 09 Apr 2024 | 10:33:42

BryanAbemy 09 Apr 2024 | 20:48:36

Hello! We are Drop Dead Studio and our goal is to help companies achieve impressive sales results through automated marketing. We sell fresh bases for GSA Search Engine Ranker and XRumer as well as a premium base for XRumer. • Bases are updated monthly through 24/7 parsing and by connecting purchased databases from other sources. • You have the option to purchase a one-time fresh database or pay for a lifetime subscription for updates. ATTENTION! 40% discount on base purchases only until

BryanAbemy 09 Apr 2024 | 20:50:57

BryanAbemy 09 Apr 2024 | 20:52:58

BryanAbemy 09 Apr 2024 | 20:54:09

SonicWALL TZ 180 Bedienungsanleitung Seite 192

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Router SonicWALL TZ 180