A zone is a logical method of grouping one or more interfaces (or sub-interfaces) into a logical entity that can be given a friendly, user-definable name. It allows the grouping of similar interfaces:
The same policies can be applied to a zone.
Traffic can be restricted between different zones.