Allowed Zone to Zone Communications

The following shows what communications are allowed between zones:

Services allowed globally:
- DNS
- ICMP
- NTP to ntp.uth.tmc.edu

Internet > Zone 20 - Defined Access
Internet > Zone 40 - No Access
Internet > Zone 100 - No Access

Zone 20 > Internet - Defined Access (but limited)
Zone 20 > Zone 40 - Defined Access
Zone 20 > Zone 100 - Defined Access

Zone 40 > Internet - Full Access
Zone 40 > Zone 20 - Full Access
Zone 40 > Zone 100 - Defined Access

Zone 100 > Internet - Defined Access (but limited)
Zone 100 > Zone 20 - Full Access
Zone 100 > Zone 40 - Full Access

No Access = No access will be allowed at all.

Defined Access = Ports that are entered into the firewall database will be allowed.

Limited Defined Access = Ports that are entered into the firewall database will be allowed if the communication is absolutely necessary and cannot be done any other way (i.e., patch downloads that cannot be done from internal patch server).