topic Re: Block Inside Network in Network Security

Block Inside Network

nikuhappy2010 — Mon, 11 Mar 2019 13:14:36 GMT

Hi, We have been using ASA for last ne year and its working fine, now can I block the inside machines that means 2 machines are available in inside zone now i want that first machine not able to access or communicate with second machine, is it possible becoz the traffic wont bypass through firewall when both communicate. Thanks

Re: Block Inside Network

Farrukh Haroon — Tue, 15 Jul 2008 16:03:42 GMT

You can use an access-list (VLAN or PORT) on the switch to block this communication.

Regards

Farrukh

Re: Block Inside Network

nikuhappy2010 — Tue, 15 Jul 2008 16:36:06 GMT

Here, the Switch is not managable and all switch are connected with inside interface of FW, now is it possible?

Re: Block Inside Network

Farrukh Haroon — Tue, 15 Jul 2008 16:42:18 GMT

If both machines are in 'same subnet', then both will communicate 'directly' and will never each the firewall. You have the following options:

> Change the switch

> Change the network design

> Play around with some routes/proxy-arp

> NAT one of the machines on the firewall etc.

Regards

Farrukh

Re: Block Inside Network

nikuhappy2010 — Tue, 15 Jul 2008 16:47:27 GMT

Thanks Farruth.