topic Re: Intervlan routing allow A>B but Block B>A in General Topics

Intervlan routing allow A>B but Block B>A

skandshus — Fri, 11 Jun 2021 22:00:05 GMT

Hey everyone.. can anybody share some experience on how they achieved a setup with inter vlan routing where vlan A can access B but B cannot access A

In my ubiquiti world where I come from I was able to push a firewall rule stating that established & related traffic was allowed and then I blocked B to A..

thay way A was able to access B and B was allowed to reply, but B was never able to start the connection ..

Re: Intervlan routing allow A>B but Block B>A

PhoneBoy — Fri, 11 Jun 2021 22:43:05 GMT

It works exactly the same way in Check Point.
You define an Access Policy rule that allows A to talk to B on the desired ports/services.
This allows reply traffic from B only if A initiated the connection.
B cannot initiate a connection to A unless there is an explicit rule allowing it.

Re: Intervlan routing allow A>B but Block B>A

skandshus — Sat, 12 Jun 2021 07:44:31 GMT

That’s nice. So if I ever needed bi directional access I would have to make explicit rule allowing A to B and B to A otherwise it would not happen ?

Re: Intervlan routing allow A>B but Block B>A

CSR — Sat, 12 Jun 2021 11:59:40 GMT

Yes @skandshus it everything will be blocked until you open/configure the relevant policy.