Huawei firewalls, by default, are pre-configured with four fundamental security zones to establish a basic security architecture. The trust zone is designated for the internal, protected network where users and resources are considered secure. The untrust zone is for external, insecure networks like the Internet. The dmz (Demilitarized Zone) is for servers that need to be accessible from the outside, such as web or email servers. Finally, the local zone represents the firewall device itself, managing traffic originating from or destined for the firewall's own processes. These zones are the building blocks for creating security policies.

1. Huawei. (2023). HedEx USG6000E Series V600R007C00 Product Documentation. Document ID: 02. Section: "Administrator Guide > Firewall > Security Zone > Security Zone". This section explicitly states

"By default

the system has four security zones: Trust

Untrust

DMZ

and Local."

2. Huawei. (2021). HCIP-Security V1.0 Training Material. Module: "Firewall Security Policy Technology". Chapter: "Security Zone". This official training courseware for the H12-821 exam details the concept and lists the four default security zones

including trust

as the basis for security policy configuration.