All Access zones have Internet access, although the local access requirements and your business needs will ultimately determine which zone should be used for each device.
Secure zone
Devices connected to this zone cannot be accessed from devices connected to either the Employee or Guest zones. All Ethernet-connected devices are also automatically placed in this zone. This is ideal for devices that require extra protection, such as:
Point of sale (POS) systems
File servers and network-attached storage (NAS)
Security cameras and other security equipment
IoT devices
Smart displays
Devices in the Secure zone can access each other over the local network; however, you can block new devices connecting to this zone from all local access without manual authorization.
If you have resources on the network that you wish to share over the network with select employees, they can also be placed in this zone:
Printers
File servers and network-attached storage (NAS)
Smart Displays and other network-attached media devices
Secure zone devices can be even grouped to make access sharing easier.
Employee zone
All employee devices should be using this zone. This will allow you to manage their access to any shared resources on the Secure zone.
You can also block all local network access to any new devices connecting to this zone until you manually approve access.
Guest zone
This zone is meant strictly for your guests/customers. Devices connecting to this zone have Internet access with no local network access. It is not possible to share any local network resources such as printers of media players with guests.
Only screen-enabled devices such as mobile phones, tablets, and laptops can connect to this zone because they need to sign-in using the Guest captive portal, which is also required every 24 hours.