topic InterVLAN Firewall Options in Network Security https://community.cisco.com/t5/network-security/intervlan-firewall-options/m-p/2332641#M342463 <HTML><HEAD></HEAD><BODY><P>What security policy are you tring to implement?</P><P></P><P>I ask becasue we seldom see small-medium networks restricting inter-VLAN traffic. We see it sometimes on larger enterprises (with dedicated firewalls for that purpose) and increasingly in data centers separating VMs or subnets ("east-west" firewalling).</P><P></P><P>An alternative approach is separate VRF instances if the subnets never talk to one another yet share a single core.</P></BODY></HTML> Fri, 27 Sep 2013 00:06:46 GMT Marvin Rhoads 2013-09-27T00:06:46Z InterVLAN Firewall Options https://community.cisco.com/t5/network-security/intervlan-firewall-options/m-p/2332640#M342461 <P>Good morning,</P><P></P><P>I am seeking advice regarding firewall capabilities between internal VLANs.&nbsp; I currently have a collapsed core architecture with a single core switch (4500 series).&nbsp; All internal VLAN SVIs reside on the core switch.&nbsp; I'm using access lists to restrict interVLAN communications, but I am wondering what other options I have.&nbsp; The only thing I can think of is to move the VLAN SVIs to an ASA.&nbsp; Is that a recommended approach?&nbsp; Any other suggestions would be greatly appreciated.</P><P></P><P>Thanks.</P> Tue, 12 Mar 2019 02:44:09 GMT https://community.cisco.com/t5/network-security/intervlan-firewall-options/m-p/2332640#M342461 Jason Fraioli 2019-03-12T02:44:09Z InterVLAN Firewall Options https://community.cisco.com/t5/network-security/intervlan-firewall-options/m-p/2332641#M342463 <HTML><HEAD></HEAD><BODY><P>What security policy are you tring to implement?</P><P></P><P>I ask becasue we seldom see small-medium networks restricting inter-VLAN traffic. We see it sometimes on larger enterprises (with dedicated firewalls for that purpose) and increasingly in data centers separating VMs or subnets ("east-west" firewalling).</P><P></P><P>An alternative approach is separate VRF instances if the subnets never talk to one another yet share a single core.</P></BODY></HTML> Fri, 27 Sep 2013 00:06:46 GMT https://community.cisco.com/t5/network-security/intervlan-firewall-options/m-p/2332641#M342463 Marvin Rhoads 2013-09-27T00:06:46Z