Embodiments of the invention provide a method and an apparatus for automatic verification of a zone configuration of a plurality of network switches. In one method embodiment, the present invention accesses an actual network access control construct and an actual zone configuration for a plurality of network switching devices. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device and a pre-determined zone configuration defining the switching devices which should be part of the zone. An automatic verification is performed, wherein the verification verifies that the actual network access control construct and the actual zone configuration of network switching devices correlates with the pre-determined network access control construct and zone configuration defined by the machine-readable map.