The zone-based firewall (ZBFW) is designed to create, manage, and enforce security policies and propagate those policies to all branch sites without using fragmented rules or managing security at an individual device-level. It is a lightweight security solution for securing the WAN perimeter and segmenting traffic within a branch site.