Why the security policy cannot block the same LAN subnet client?

Zyxel_Jeff
Zyxel_Jeff Posts: 1,284  Zyxel Employee
100 Answers 500 Comments Friend Collector Fourth Anniversary

Scenario :

The user may encounter a situation when creating a security policy to block the same LAN subnet (or LAN interface groups such as ge4 and ge5 that belong to the same LAN group) for clients, but it's not working.

Answer :

This is by design. For example, if the user designates ge4 and ge5 as part of the same LAN group, the firewall will treat them as if there's an L2 dummy switch between the two GE interfaces. As a result, traffic transmitted on these two ports won't be processed by the security policy. The purpose of this design is to accelerate network efficiency.


See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community