Block and Allow internet access for VLAN in switches sitting behind PA FW

cancel
Showing results for 
Search instead for 
Did you mean: 

Block and Allow internet access for VLAN in switches sitting behind PA FW

L1 Bithead

Hi Support,

We have configured additional VLAN in our cisco core switches sitting behind PA FW.

I want to allow and block internet in certain VLAN, eg VLAN7 to allow and VLAN70 in the switches to block internet access.

 

Any procedures and where to check for this kind setup of situation in PA?

 

Thanks all !!

1 ACCEPTED SOLUTION

Accepted Solutions

L4 Transporter

Thank you for posting the question @isentric89

 

Probably the easiest way is to configure a new security policy and use as Source Address the subnet configured for Vlan 70 and application: "web-browsing" with the action: Deny, then place this rule on the top to make sure it will be hit first. If your default policy is to allow internet traffic, then you do not need to take any further action to explicitly allow internet for Vlan 7. If your default policy is to block everything, then do it over way around. Configure a new security policy and use as Source Address the subnet configured for Vlan 7 and application: "web-browsing" with the action: Allow.

 

You can confirm the desired outcome of the configuration from Traffic log.

 

Kind Regards

Pavel

Pavel Kucera

View solution in original post

3 REPLIES 3

L4 Transporter

Thank you for posting the question @isentric89

 

Probably the easiest way is to configure a new security policy and use as Source Address the subnet configured for Vlan 70 and application: "web-browsing" with the action: Deny, then place this rule on the top to make sure it will be hit first. If your default policy is to allow internet traffic, then you do not need to take any further action to explicitly allow internet for Vlan 7. If your default policy is to block everything, then do it over way around. Configure a new security policy and use as Source Address the subnet configured for Vlan 7 and application: "web-browsing" with the action: Allow.

 

You can confirm the desired outcome of the configuration from Traffic log.

 

Kind Regards

Pavel

Pavel Kucera

View solution in original post

Hi Pavel,

 

Thanks for the suggestion !! Appreciated it

L4 Transporter

Thank you for reply @isentric89 If you get stuck with anything else do not hesitate to ask.

Pavel Kucera
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!