ION Security Stack

[Jonathan.Guthrie]

Hi

I am setting up the NGFW / Security Policy feature on an ION1000 running OS 5.6.17-b1

Enable L3 Direct Private WAN Forwarding? - Yes
Enable L3 LAN Forwarding? - Yes

I have created 2 VLANs (Say VLAN 100 & 200) on the LAN side & an Internet connection

The Security stack has been configured to allow traffic from both VLANs to the Internet & to block all traffic between the VLANs, however I can ping the VLAN100 interface from VLAN200 & vice versa, but cannot ping anything else in the VLAN. (There is also a deny all rule configured before the Default set)

The ping requests do not show up in the traffic flow monitor either.

How is this possible when the traffic is blocked by the Security Stack ?

Regards

Jon