topic Intra Traffic between hosts of isloated vlan in Next-Generation Firewall Discussions

Intra Traffic between hosts of isloated vlan

Martin2K — Fri, 19 Jan 2024 01:47:25 GMT

Hello,

We have two host part of same zone [vlan] but set up as isolated VLAN on switch.

The uplink of switch is connected to FW Zone.

And I am wondering whether a pre or post is necessary to allow intra traffic between these two hosts living in a isolated VLAN on switch.

Please advise.

Thanks.

Re: Intra Traffic between hosts of isloated vlan

OtakarKlier — Mon, 22 Jan 2024 21:21:32 GMT

Hello,

I am a huge fan of a DENY ALL policy at the bottom. This approach would require a policy to allow traffic between the two systems. It also allows for segmentation of the vlan and hosts even if in the same IP subnet as other systems.

Regards,