What are security zones?

Microsoft Internet Explorer 4.0 divides your Internet world into zones, so that you can assign specific security settings to each zone and then assign Web sites to a zone with a suitable security level.

You can tell which zone the current Web page is in by looking at the right side of the Internet Explorer status bar. Whenever you attempt to open or download content from the Web, Internet Explorer checks the security settings for that Web site's zone.

Internet Explorer 4.0 provides four different zones:

• Local intranet Basically any addresses that don't require a proxy server. The addresses included in this zone are defined by the system administrator in the Internet Explorer Administrator's Kit (IEAK). The default security level for the Corporate Intranet zone is Medium.
• Trusted Sites Sites you trust enough to apply low security before downloading or running files from the Internet. You can assign sites to this zone. The default security level for The Trusted Sites zone is Low.
• Restricted Sites Sites you don't trust, for which you require medium or high security before downloading or running files from the Internet. You can assign sites to this zone. The default security level for the Restricted Sites zone is High.

• Internet By default, anything that is not on your computer, an intranet, or assigned to any other zone. The default security level for the Internet zone is Medium.

In addition, any files already on your local computer are assumed to be completely safe, and no security settings are applied to them. This allows you to open and run files and programs on your computer without prompting or interruption. You cannot assign a folder or drive on your computer to a security zone.

Setting up security zones requires:

• Setting a security level for each zone

• Assigning Web sites to a specific zone

How you assign security levels and Web sites is completely up to you. The actions for each level are already defined, but you can also create custom settings for the security level.

Generally, you would trust Web sites on an intranet the most, and would probably set your security setting to Low for that zone. Most programs could then be run or downloaded from those sites with little or no notification.

On the other hand, Restricted Web sites may be those that you want to avoid running or opening any scripts or active content from.