Prisma SD-WAN allows to bind zones to sites and devices.
Zones bound at the site-level or
the device-level to
a specific interface or a subnet are bound to multiple networks
at a site, including LANs, WANs, or VPNs. However, each network
only attaches to one zone, and a device is bound to multiple interfaces
or subnets. If a zone or device is not bound to an interface or
subnet, it blocks all the traffic.
In case of a conflict between site-level and device-level
bindings, device-level bindings take priority.