Enterprise Security Policy: Zone Matrix & Checker

How this template works

A zone-based security policy defines which parts of your network are allowed to communicate, and over which protocols. Rather than reverse-engineering that intent from hundreds of firewall rules, this template documents it explicitly as a matrix: each row is a source zone, each column a destination zone, and each cell lists the services permitted between them.

What you can do with it

• Define your zones. Start from the example zones (Internet, DMZ, Internal, Servers, Management, Guest) and rename, add, or remove them to match your own segmentation.
• Fill in the connectivity matrix. For each zone pair, list the permitted services, allow everything, or deny the pair entirely.
• Map your networks. Assign each subnet to a zone so that any IP address can be resolved back to its zone automatically.
• Check a connection. Enter a source IP, a destination IP, and a protocol to get an instant ALLOWED or DENIED verdict based on your own policy.
• Download your version. Export the result as an Excel workbook containing your zones, your matrix, your networks, and the last check you ran.

Everything runs locally in your browser. No zone names, IP addresses, or network data are sent to a server at any point.