The challenge here is how to enforce a security rule on data when data is traversing within the same switch if it is in same Vlan. If you have certain use case where you want to control the communication within the same vlans, then you can take advantage of Private VLAN concept.
Hi, No that's not really possible to block traffic within the same VLAN with FTD. As already mentioned, you could use Private VLANs or alternatively you could use VLAN ACLs (VACL) or TrustSec, this is dependant on feature support in your switches.
HTH
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
