Block two PCs from browsing within the network

Forum|Forum|2 years ago
January 19, 2024
3 replies
1528 views

Good morning everyone  Perhaps a trivial question.  I need two PCs to be able to regularly access the internet but not to browse the LAN. Basically blocks that prevent communication with Active Directory or other.

FortiGate

dbu

Staff

Hi @Fabio74 ,

Are the destinations on the same network or different networks ?

If same network/VLAN , intra-VLAN communication should be blocked.

If different network you need firewall policy to allow/block traffic from/to your destinations.

I believe you need firewall policies.

Fabio74Author

New Member

Ciao dbu e grazie della risposta.

I 2 PC sono sulla stessa VLAN è proprio quello il problema e non posso cambiare VLAN

dbu

Staff

If they are in the same VLAN you need to block the intra-VLAN traffic.

Here is how to change the VLAN:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Changing-VLAN-interface-configuration/ta-p/244017

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Edit-VLAN-ID-of-a-VLAN-interface/ta-p/215295

Have a look at this documentation how to block intra-VLAN traffic:

https://docs.fortinet.com/document/fortiswitch/7.0.8/devices-managed-by-fortios/801169/blocking-intra-vlan-traffic

Sign up

Login with SSO

Login to the community

Login with SSO