https://community.checkpoint.com/t5/Spark-Firewall-SMB/Intervlan-ACL/m-p/196993#M9732 <P>Hi guys,</P><OL><LI>Spark 1500 appliance</LI><LI>Several sub-interfaces for different internal VLANs</LI><LI>The firewall is performing routing/L3 duties for all VLANs, ie each vlan default gateway is the firewall subinterface IP</LI></OL><P>&nbsp;</P><P>Is it possible restrict access from VLAN A to VLAN B after setting the Policy to Strict and configuring specific rules:</P><P>&nbsp;</P><P>Network A -&gt; Network B -&gt; Any -&gt; Block</P> Fri, 03 Nov 2023 02:23:27 GMT Phtephen 2023-11-03T02:23:27Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Intervlan-ACL/m-p/196993#M9732 <P>Hi guys,</P><OL><LI>Spark 1500 appliance</LI><LI>Several sub-interfaces for different internal VLANs</LI><LI>The firewall is performing routing/L3 duties for all VLANs, ie each vlan default gateway is the firewall subinterface IP</LI></OL><P>&nbsp;</P><P>Is it possible restrict access from VLAN A to VLAN B after setting the Policy to Strict and configuring specific rules:</P><P>&nbsp;</P><P>Network A -&gt; Network B -&gt; Any -&gt; Block</P> Fri, 03 Nov 2023 02:23:27 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Intervlan-ACL/m-p/196993#M9732 Phtephen 2023-11-03T02:23:27Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Intervlan-ACL/m-p/197035#M9734 <P>Yes you can use the firewall for VLAN segmentation.&nbsp;</P> <P>Depending on the exact scope of protection required additional settings may be necessary:</P> <P><A href="https://support.checkpoint.com/results/sk/sk102296" target="_self">sk102296: How to activate inspection on internal traffic on Quantum Spark appliances</A></P> Fri, 03 Nov 2023 12:39:25 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Intervlan-ACL/m-p/197035#M9734 Chris_Atkinson 2023-11-03T12:39:25Z