Why the security policy cannot block the same LAN subnet client?
Options
Zyxel_Jeff
Posts: 1,088 
Zyxel Employee
Zyxel Employee
in Networking
Scenario :
The user may encounter a situation when creating a security policy to block the same LAN subnet (or LAN interface groups such as ge4 and ge5 that belong to the same LAN group) for clients, but it's not working.
Answer :
This is by design. For example, if the user designates ge4 and ge5 as part of the same LAN group, the firewall will treat them as if there's an L2 dummy switch between the two GE interfaces. As a result, traffic transmitted on these two ports won't be processed by the security policy. The purpose of this design is to accelerate network efficiency.
Tagged:
0
Categories
- All Categories
- 397 Beta Program
- 2.1K Nebula
- 117 Nebula Ideas
- 81 Nebula Status and Incidents
- 5.1K Security
- 89 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 918 WirelessLAN
- 35 WLAN Ideas
- 5.9K Consumer Product
- 211 Service & License
- 337 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2K FAQ
- 920 Nebula FAQ
- 422 Security FAQ
- 237 Switch FAQ
- 208 WirelessLAN FAQ
- 47 Consumer Product FAQ
- 139 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 72 About Community
- 62 Security Highlight