what is the name for Zone-Based Policy Configuration in pfsense?

[dean.bushmiller]

Zone / trust level numeric assignment process?

When I have one firewall and 5 different zones, I want to assign values to each net/zone rather than writing a ton of rules. For example R&D host are in 5 subnets or VLANS so I assign them a value of 100, Accounting is in two vlans and their value is 50, The internet is untrusted so it is assign value of 0. I can flow traffic from higher trust to lower but not reverse. this would be fine but then tommorow Someone say we have a new department and the level of trust is between R&D and acct so I assign a value of 75.

I want the rules previously setup to continue to work and I now want the new department to flow only to lower levels of trust but not higher. The other big vendor calls this "Zone-Based Policy Configuration Model " does pfsense have this feature? What is it called and can someone point me to the configuration options?

Thanks in advance.

[jimp]

Those concepts do not exist in pfSense.

You can sort of make "zones" with interface groups to apply rules to several interfaces at once, but not effectively in most cases.

[xlameee]

@jimp Hello
Just a quick question: Is the OpenVPN Interface acting like Group interface if you have a multiple VPN connections :) ?

[jimp]

@xlameee said in what is the name for Zone-Based Policy Configuration in pfsense?:

@jimp Hello
Just a quick question: Is the OpenVPN Interface acting like Group interface if you have a multiple VPN connections :) ?

Yes. The OpenVPN tab is a group tab that covers all OpenVPN interfaces. It is checked before the per-interface rule tabs are checked. See https://www.netgate.com/docs/pfsense/firewall/firewall-rule-processing-order.html for more info.