diferent whether I choose type LAN vs DMZ for a new zone

Hi Pavel Vanek 

Thank you for contacting us.

You can configure any zone type, there is no such difference than the name of the zones. It is just to distinguish your network and have a better understanding and scenario.

https://community.sophos.com/kb/en-us/126185

Thank you, I know that link. It says:

You may also create new zones; they will either be DMZ or LAN type.

• LAN: You may create new custom LAN zones if you want to further segment your network. For example, you can have one LAN zone for sales and a separate zone for engineering.
• DMZ: You may have up to 5 ports connected. A business application rule will still be needed to make them publically acceptable

But is there a real diferent or is it only the name LAN vs DMZ? I see that even LAN zone type with a business application rule can be used as DMZ type? Is there a reason why not all zones shlould be LAN type?

Hi Pavel Vanek 

There is no such real difference. It just to separate your network, if you place your server in DMZ zone and want to apply access restriction from LAN users than LAN to DMZ firewall rules can be configured.

This wording is indeed very bizarre:

DMZ: You may have up to 5 ports connected

Pretty sure there is no difference as per the second answer!

This is a leftover from Cyberoam days as it used to ask you on those as well - It's been a while since I did my Cyberoam CCNSE but I don't think it had any feature then either!

This wording is indeed very bizarre:

DMZ: You may have up to 5 ports connected

Pretty sure there is no difference as per the second answer!

This is a leftover from Cyberoam days as it used to ask you on those as well - It's been a while since I did my Cyberoam CCNSE but I don't think it had any feature then either!