# FR: Support for adding firewall zones

**URL:** <https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945>\
**Category:** Feature Requests\
**Created:** [March 26, 2025, 6:54pm UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945 "2025-03-26T18:54:44Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![chaz6](https://forum.alta.inc/user_avatar/forum.alta.inc/chaz6/32/3821_2.png) [@chaz6](https://forum.alta.inc/u/chaz6)\
**Post date:** [March 26, 2025, 6:54pm UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/1 "2025-03-26T18:54:44Z")

</div>

I would like to be able to create new zones and assign VLAN interfaces to zones other than LAN or WAN.

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [March 26, 2025, 7:29pm UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/2 "2025-03-26T19:29:34Z")

</div>

Just to get the hang of it. Is this the same as the already existing color concept or is it some more extended version of it. How would it work and be used?

---

<div class="post-metadata">

**Author:** ![chaz6](https://forum.alta.inc/user_avatar/forum.alta.inc/chaz6/32/3821_2.png) [@chaz6](https://forum.alta.inc/u/chaz6)\
**Post date:** [March 27, 2025, 8:33am UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/3 "2025-03-27T08:33:49Z")

</div>

VLANs are assigned to zones, then rulesets are applied to zone pairs (e.g. WAN → Servers, Servers → Printers)

---

<div class="post-metadata">

**Author:** ![ebuckland81](https://forum.alta.inc/user_avatar/forum.alta.inc/ebuckland81/32/3446_2.png) [@ebuckland81](https://forum.alta.inc/u/ebuckland81)\
**Post date:** [March 27, 2025, 8:38am UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/4 "2025-03-27T08:38:32Z")

</div>

So, it would simplify firewall rules handling. 🙂

---

<div class="post-metadata">

**Author:** ![chaz6](https://forum.alta.inc/user_avatar/forum.alta.inc/chaz6/32/3821_2.png) [@chaz6](https://forum.alta.inc/u/chaz6)\
**Post date:** [March 27, 2025, 6:36pm UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/5 "2025-03-27T18:36:19Z")

</div>

There should also be a LOCAL zone, for packets destined for the router itself (e.g. different rules for LAN-\>LOCAL, Servers-\>Local, WAN-\>Local.

---

<div class="post-metadata">

**Author:** ![remixedcat](https://forum.alta.inc/user_avatar/forum.alta.inc/remixedcat/32/5657_2.png) [@remixedcat](https://forum.alta.inc/u/remixedcat)\
**Post date:** [September 27, 2026, 3:35am UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/6 "2026-09-27T03:35:27Z")

</div>

bumping this because I do, love the way that ubiquiti implements ZBF, would be cool to implement it in the GUI. very few firewall vendors have ZBF!

---

<div class="post-metadata">

**Author:** ![etherxrally](https://forum.alta.inc/user_avatar/forum.alta.inc/etherxrally/32/5218_2.png) [@etherxrally](https://forum.alta.inc/u/etherxrally)\
**Post date:** [September 29, 2026, 2:46pm UTC](https://forum.alta.inc/t/fr-support-for-adding-firewall-zones/4945/7 "2026-09-29T14:46:36Z")

</div>

You could essentially do this with Firewall Groups. . I think the ask here is more for a simplified GUI with red and green to show where traffic is going? The Ubiquiti deal seems neat but I would think that in larger networks it might start to lose value. What Alta is doing is in line with traditional firewalls and how they handle Firewall groups gives a pretty powerful way to simplify your rule base.