Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] What is a functional zone?



Article ID: KB6375 KB Last Updated: 24 Sep 2020Version: 6.0

What is a functional zone?


Problem or goal:

  • What is a functional zone?
  • To determine what a function zone is used for.

The five functional zones in the Juniper firewall are HA, Null, MGT, Self, and VLAN.

  • The HA zone hosts the High-Availability interfaces
  • The Null zone serves as a temporary storage for any interfaces that are not bound to any other zones.
  • MGT zone is the out of band management interface.
  • The Self zone is used for remote management connections when you use HTTP, TELNET, or SSH.
  • The VLAN  zone hosts the VLAN1 interface, which you use to manage the device and terminate VPN traffic when the device is in transparent mode. You can also set firewall options on this zone to protect the VLAN1 interface from various attacks.

Note: For additional information on the function zones, refer to the Concepts & Examples ScreenOS Reference Guide - Volume 2 - Fundamentals:, and refer to the 'Function Zones' section of the 'Zones' Chapter

Modification History:
2020-09-21: Corrected URL link for Function Zones, and updated the self zone management connection to refer to ssh instead of scs
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search