An example system includes a vehicle having at least one network zone, and a policy manager circuit that interprets a policy including a local DNS, an authorization description, and a firewall configuration description. The system includes a configuration circuit that configures a gatekeeper interface circuit in response to the policy, where the gatekeeper interface circuit is interposed between one of the network zones and an external communication portal, and regulates communications between end points of the network zone and the external communication portal.