5.3.2. Security Rules and Zones

Security Rule Types:

• ACL (Access Control List): Permit/deny based on source, destination, port, protocol
• URL filtering: Block websites by URL or category
• Content filtering: Block by content type (file types, data patterns)

Security Zones:

• Trusted: Internal network with full access
• Untrusted: Internet, no implicit trust
• Screened subnet (DMZ): Semi-trusted zone for public-facing services