configuration RED

You need to decide this at your own.

https://community.sophos.com/kb/en-us/126454

Web Policies are only applied in Standard / Unified. 

hola, actualmente creo una nueva zona, he creado reglas en el firewall de la siguiente manera:
Red lan
LAN-RED
RED-WAN
RED-WIFI
en la empresa se administra un sistema, al agregar el rojo a esta zona no puedo iniciar sesión en dicho sistema. 
pero si cambio el rojo a la zona de lan si puedo acceder, podrías ayudarme por favor

the red ones are configured as standard / unified mode

I cannot speak Spanish, sorry :( 

But most likely this should work fine. RED will send everything from RED site to your XG. 

XG will look for a firewall rule and send the traffic to the proper interface / client. 

Be careful with Broadcast / Multicast. Those protocols will not be forwarded. 

Sorry. LuCar Toni
hello, currently create a new zone, I have created rules in the firewall as follows:
RED LAN
LAN-RED
RED-WAN
RED-WIFI
in the company a system is managed, when adding the red to this zone I can not initiate session in said system. 
but if I change the red to the lan zone if I can access, you could help me please

the red ones are configured as unified standard

you could explain more about multicasting and diffusion since I am new to all this.

First of all, you should read this KBA: 

https://community.sophos.com/kb/en-us/126454

It explains a lot about RED and the inner working. 

Basically you can picture RED as a Layer 2 Interface (a Ethernet cable plugged into XG). 

And this is how XG will process the data. 

All limitation of a Layer 3 Routing will take place. 

So to speak, Multicast and Broadcast are not being forwarded by XG to other interfaces. 

First of all, you should read this KBA: 

https://community.sophos.com/kb/en-us/126454

It explains a lot about RED and the inner working. 

Basically you can picture RED as a Layer 2 Interface (a Ethernet cable plugged into XG). 

And this is how XG will process the data. 

All limitation of a Layer 3 Routing will take place. 

So to speak, Multicast and Broadcast are not being forwarded by XG to other interfaces.