windows-itpro-docs/windows/security/threat-protection/windows-firewall/planning-domain-isolation-zones.md

title, description, ms.assetid, ms.reviewer, ms.author, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.collection, ms.topic, ms.date, ms.technology

title	description	ms.assetid	ms.reviewer	ms.author	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	author	manager	audience	ms.collection	ms.topic	ms.date	ms.technology
Planning Domain Isolation Zones (Windows)	Learn how to use information you have gathered to make decisions about isolation zones for your environment in Windows Defender Firewall with Advanced Security.	70bc7c52-91f0-4a0d-a64a-69d3ea1c6d05		dansimp	m365-security	deploy	library	security	medium	dansimp	dansimp	ITPro	M365-security-compliance	conceptual	09/08/2021	windows-sec

Planning Domain Isolation Zones

Applies to

• Windows 10
• Windows 11
• Windows Server 2016 and above

After you have the required information about your network, Active Directory, and client and server devices, you can use that information to make decisions about the isolation zones you want to use in your environment.

The bulk of the work in planning server and domain isolation is determining which devices to assign to each isolation zone. Correctly choosing the zone for each device is important to providing the correct level of security without compromising performance or the ability for a device to send or receive required network traffic.

The zones described in this guide include the following:

• Exemption List

• Isolated Domain

• Boundary Zone

• Encryption Zone