This content has been marked as final. Show 3 replies
Most of the time each zone is treated as a separate server. This is my experience others might do it differently. All logs can then be sent to a log server and you will know that about the zone errors because the zone has a zone and/or host name. You can also login to the zone and check the logs there as well.
The link below is for book from a guy who is much smarter then me. Read the security chapter.