Zone-based firewall (ZBF) | Cisco Packet Tracer

Zone-based firewall (ZBF) enables basic firewall features on Cisco IOS. It allows administrators to control the traffic with a default deny-all policy that prohibits traffic flow between zones. If the policy is explicitly configured, then only traffic is allowed between different zones. Steps to configure ZBF is mentioned below: 1. Create a class-map that identifies the traffic. 2. Create a policy-map to specify an action to be performed on identified traffic. 3. Create security zones. 3. Create zone-pair and apply service-policy for the zone-pair. 5. Apply security zones to the interfaces.