>
    Strata Copilot
    Bind Security Zones to Sites
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Stacked Security Policies
    5. Bind Security Zones to Sites
    Download PDF
    Prisma SD-WAN

    Bind Security Zones to Sites

    Table of Contents

    Bind Security Zones to Sites

    Learn how to bind security zones to sites.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    Use site bindings to map firewall zones to interfaces and networks. Binding a zone to a site attaches networks to the zones for that site. A zone can have multiple networks, but a network can only have one zone.
    If a site has both site-level bindings and device-level bindings, the two settings’ resulting configuration is united. In the event of a conflict between site-level bindings and device-level bindings, device-level bindings take precedence.
    You can bind security zones to sites either by selecting a security zone first and then binding it to site or you can select the site first and then select a security zone for binding.
    • Select a security zone and bind it to a site.
      1. Select ConfigurationPrisma SD-WANPoliciesSecuritySecurity Zones, and select a Security Zone.
      2. From the ellipsis menu for a security zone, select View Interface Bindings.
      3. Click Site.
      4. Click Bind New Site.
      5. Select a site to bind and click Submit.
      6. On the Site Zone Binding for Site screen, select a circuit(s) to bind to the zone.
      7. Click Save.
    • Select a site and bind a security zone to a device interface(s).
      1. Select ConfigurationPrisma SD-WANBranch Sites/Data Centers and select a site.
      2. Locate Zone Bindings in the Branch Site Details section and click Manage Security Zone Bindings.
      3. Click Bind Zone and select a zone to bind and then click Done.
      4. On the Zone Networks Binding for Zone screen, select a circuit(s) to bind to the zone.
      5. Click Save.

    © 2026 Palo Alto Networks, Inc. All rights reserved.