What I don't understand is how I should use zones.
Say, for example, I have to build a network for a company. I would start by looking at the different departments (e.g. Sales, Management) and design VLANs/subnets for each one of them.
But how can I apply zones to this network? Would I assign a zone to each VLAN/subnet? I've seen an article that assigns IP address ranges to zones, so I believe a zone maps to a subnet/vlan.
Or would I have to create completely different zones, for example Inside, Outside, DMZ.
FWIW, I'm using a PaloAlto Firewall.