Disabling firewall on trusted zone

[EAP56]

Hi, Can anyone recommend the best settings for the Integrity Client to have the firewall enabled when connected to an untrusted network and the firewall safely disabled (or very limited) when connected to our divisional network?

i.e. should we have a rule in the Firewall Settings tab to allow any protocol and have the Access Zones set to Internet=HIGH and Trusted=Medium or LOW?

Thank-you for your help.

[EAP56]

After tinkering with the parameters and performing some tests I have the following configuration. Maybe some of you can comment on whether I am on the right track or not.

Classic Firewall Rule: 1 Rule > Source=All trusted Segments Destination=All trusted Segments Protocol=Any Action=Allow

Zone Rules: Internet Zone Security Level = HIGH
Trusted Zone Security Level = Medium

Access Zones: When a new network is detected by the client::Leave the network in the Internet Zone. Locations and Zones=All trusted segments

Thank-you for your assistance.