Can I assign a host via address object to DMZ zone

SteveGoldband

Can I assign a host via address object to DMZ zone when its physically on the same LAN as firewalled hosts? I have several hosts that want unfettered Internet access (dedicated devices like a VOIP switch) and are low security risks-- but they share a LAN switch with vulnerable hosts that need to be behind the firewall.

Saravanan

Hi @STEVEGOLDBAND,

Thank you for visiting SonicWall Community.

Yes, you can assign a host via address object to DMZ zone when its physically on the same LAN.

IMO, making use of same switch between two different subnets can cause network loop and traffic may get interrupted. You can differentiate the traffics between these subnets by using VLAN segregation.

Hope this helps.