VLAN Firewall Policy?

azwanarif · ‎01-23-2016

Hi All,

As per subject above does inter vlan communication is required policy for configuration as screenshot attached below?. Thanks

ede_pfau · ‎01-24-2016

Yes you do need a policy between a VLAN and any other network (physical or virtual). In addition you need proper routing but that is taken care of automatically if one of the physical ports of the FGT is part of a VLAN (see Routing > Routing table).

Having a lot of VLANs can lead to a lot of policies. One way to simplify the config is to add multiple source interfaces to one policy. This is a new feature though introduced in v5.0 or v5.2 (not sure atm).

Ede Kernel panic: Aiee, killing interrupt handler!

View solution in original post

ede_pfau · ‎01-24-2016

Yes you do need a policy between a VLAN and any other network (physical or virtual). In addition you need proper routing but that is taken care of automatically if one of the physical ports of the FGT is part of a VLAN (see Routing > Routing table).

Having a lot of VLANs can lead to a lot of policies. One way to simplify the config is to add multiple source interfaces to one policy. This is a new feature though introduced in v5.0 or v5.2 (not sure atm).

Ede Kernel panic: Aiee, killing interrupt handler!

VLAN Firewall Policy?

Nominate a Forum Post for Knowledge Article Creation