Configure a Custom Interface

A custom interface enables you to define a custom security zone that is separate from the predefined trusted, optional, and external zones. A custom interface is not a member of the built-in aliases Any-Trusted, Any-Optional, or Any-External. Because a custom interface is not included in the built-in aliases, traffic for a custom interface is not allowed through the Firebox unless you specifically configure policies to allow it.

You can configure a physical interface, wireless interface, Bridge, VLAN, or Link Aggregation interface as a custom interface. When you configure an interface as a custom interface, the network settings you can configure are the same as for a trusted or optional interface.

When to Use a Custom Interface

These examples show how you can use a custom interface:

Configure the Interface

To configure a physical interface as a custom network interface, you set the Interface Type to Custom. Then configure all other interface settings as you would for a trusted or optional interface.

To configure a wireless, VLAN, Bridge, or Link Aggregation interface as a custom interface, set the Interface Type to Custom, and configure all other interfaace settings as you would for a trusted or optional interface.

After you configure an interface as a custom interface, you must configure policies to allow traffic to and from the interface. You can edit the existing policies or create new policies that use the custom interface name. Or, you can create a new alias that includes multiple custom interfaces, and then use that custom alias in policies. For more information about aliases, see About Aliases.

See Also

Common Interface Settings

About Advanced Interface Settings

Give Us Feedback     Get Support     All Product Documentation     Technical Search