Secure Mobile Access 12.4 Administration Guide

Defining Zones

There are three categories of zones that you can customize, plus a built-in zone (Default); see the below table. A community can include Deny, Standard, and Quarantine zones; the Default zone, on the other hand, is global. See Adding Communities to a Realm for more information about communities.

Types of zones
Zone typeDescription
DenyDeny zones are evaluated first. The appliance tries to find a match in the list of Deny zones, starting with the one at the top. If there is a device profile match (for example, a certain file is found on the device), the user is denied access to the network. See Creating a Deny Zone for more information.
Device

If the device does not match the criteria for a Deny zone, the appliance tries to find a match in the list of Standard zones, starting with the one at the top. The standard zone category contains the Device zone. If the device matches the criteria, it is placed in a zone of trust.

If no match is found, the device is placed in the Default zone or in a Quarantine zone (if one is defined). See Creating a Device Zone for more information.

QuarantineA device for which there is no profile match is placed in either the Default zone or in a Quarantine zone. You can customize the message users see; for example, you may want to explain what is required to bring the user’s system into compliance with your security policies. There can be only one Quarantine zone in a community. See Creating a Quarantine Zone for more information.
DefaultThis zone is global and implicitly present in every community configured in AMC. If a device does not match any other profile, you choose whether it should “fall through” to the Default zone or to a Quarantine zone. You can customize the Default zone to some extent, but you cannot delete it. See Configuring the Default Zone for more information.

The below image illustrates the order in which zones are evaluated. Only the Default zone is required:

Zone evaluation order

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.