Definition
A FortiGate zone groups interfaces so firewall policies can reference them more consistently.
How it works
Depending on FortiOS configuration, policies refer to zones instead of individual interfaces. A zone does not merge VLANs or automatically provide the intended segmentation.
Real-world example
A LAN zone may include trusted interfaces while a WAN zone groups uplinks; traffic remains subject to firewall policy.
Limits and best practices
Document membership, check intrazone traffic settings and review policy impact before changing interface zones.