13.1. Zones

The Proxmox VE firewall groups the network into the following logical zones:

Host
Traffic from/to a cluster node
VM
Traffic from/to a specific VM

For each zone, you can define firewall rules for incoming and/or outgoing traffic.