Firewall
Configuring Firewall Rules to Control Inbound and Outbound Traffic
Cisco ISA500 Series Integrated Security Appliances Administration Guide 253
6
Security Levels and Predefined Zones
Security Level Description Predefined Zones
Trusted (100) Highest level of trust.
By default, the DEFAULT VLAN is
mapped to the predefined LAN zone.
You can group one or more VLANs into a
Trusted zone.
LAN
VPN (75) Higher level of trust than a public zone,
but a lower level of trust than a trusted
zone.
This security level is used exclusively for
VPN connections. All traffic is encrypted.
VPN
SSLVPN
Public (50) Higher level of trust than a guest zone,
but a lower level of trust than a VPN
zone.
DMZ
Guest (25) Higher level of trust than an untrusted
zone, but a lower level of trust than a
public zone.
GUEST
Untrusted (0) Lowest level of trust.
By default, the WAN1 interface is
mapped to the WAN zone. If you are
using the secondary WAN (WAN2), you
can map it to the WAN zone or any other
untrusted zone.
WAN
Voice Designed exclusively for voice traffic.
Incoming and outgoing traffic is
optimized for voice operations. For
example, assign Cisco IP Phones to the
VOICE zone.
VOICE