Intra Traffic between hosts of isloated vlan

[Martin2K]

Hello,

We have two host part of same zone [vlan] but set up as isolated VLAN on switch.

The uplink of switch is connected to FW Zone.

And I am wondering whether a pre or post is necessary to allow intra traffic between these two hosts living in a isolated VLAN on switch.

Please advise.

Thanks.

[OtakarKlier]

Hello,

I am a huge fan of a DENY ALL policy at the bottom. This approach would require a policy to allow traffic between the two systems. It also allows for segmentation of the vlan and hosts even if in the same IP subnet as other systems.

Regards,