User's Manual

Networking
Configuring the Routing
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 130
4
- For VLANs, all security levels are selectable.
- For DMZs, choose Public (50).
- For WAN interfaces, choose Untrusted (0).
• Map VLANs to This Zone: Choose the existing VLANs or WAN interfaces
from the Available VLANs list, and click the right arrow -> to add them to the
Mapped to Zone list. You can create new VLANs by clicking Create VLAN.
STEP 5 Click OK to save your settings.
STEP 6 Click Save to apply your settings.
NOTE Next Steps:
• After you create a new zone, a certain of firewall access rules are
automatically generated to permit or block the traffic from the new zone to
any other zone or from any other zone to the new zone. The permit or block
action is determined by the security level of the new zone. By default, the
firewall prevents all inbound traffic and allows all outbound traffic. To
customize firewall access rules for the new zone, go to the Firewall -> ACL
Rules -> Rule page. For more information, see Configuring the Firewall
Access Rules to Control Inbound and Outbound Traffic, page 178.
• Map the security services to zones. If you enabled the security services
such as IPS and Anti-Virus on your security appliance, you need to map the
security services to the zones. By default, the IPS and Anti-Virus services
are mapped to the WAN zone. To specify the mapping relationships
between the security services and zones, go to the Security Services
pages. See Security Services, page 210.
Configuring the Routing
Use the Routing pages to change the routing mode between WAN and LAN, view
the routing table, configure the static routing, dynamic routing, and Policy-based
Routing settings. It includes the following sections:
• Configuring the Routing Mode, page 131