Networking
Configuring the Routing
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
130
4
-
For VLANs, all security levels are selectable.
-
For DMZs, choose Public (50).
-
For WAN interfaces, choose Untrusted (0).
•
Map VLANs to This Zone:
Choose the existing VLANs or WAN interfaces
from the
Available VLANs
list, and click the right arrow
->
to add them to the
Mapped to Zone
list. You can create new VLANs by clicking
Create VLAN
.
STEP 5
Click
OK
to save your settings.
STEP 6
Click
Save
to apply your settings.
NOTE
Next Steps:
•
After you create a new zone, a certain of firewall access rules are
automatically generated to permit or block the traffic from the new zone to
any other zone or from any other zone to the new zone. The permit or block
action is determined by the security level of the new zone. By default, the
firewall prevents all inbound traffic and allows all outbound traffic. To
customize firewall access rules for the new zone, go to the
Firewall -> ACL
Rules -> Rule
page. For more information, see
Access Rules to Control Inbound and Outbound Traffic, page 178
.
•
Map the security services to zones.
If you enabled the security services
such as IPS and Anti-Virus on your security appliance, you need to map the
security services to the zones. By default, the IPS and Anti-Virus services
are mapped to the WAN zone. To specify the mapping relationships
between the security services and zones, go to the
Security Services
pages. See
.
Configuring the Routing
Use the Routing pages to change the routing mode between WAN and LAN, view
the routing table, configure the static routing, dynamic routing, and Policy-based
Routing settings. It includes the following sections:
•
