FWSM security level

[arpportoPereira]

Hi,

I needed to block traffic between some VLANs by default in the same context of fwsm.

Can I remove the permission that allows traffic between VLANs with the same level of security (same-security-traffic permit inter-interface) and put those VLANs with the same level and automatically block the traffic between them, the rest of the Vlans I can put them with different security levels, and allow the communication between them, is this good practice? There are any restrictions?

Thanks for the help

[ajay chauhan · Accepted solution]

Yup thats the way it should be once you remove -same-security-traffic permit inter-interface no communication will be there between even they do have same security level. I dont think there should be any issue.

[arpportoPereira]

thanks

[ambivert skill]

Hi can you please guide me how FWSM is configured in your environment actually I need to deploy FWSM in transparent mode in my environment.

Regards

Ambivert SKill