East - West Traffic for FTD

[fatalXerror]

Hi Guys,

Just want to check with you if it is possible to block east-west traffic in FTD? Those endpoints which are within the same VLAN or network.

Thanks

[Muhammad Awais Khan]

Hi,

The challenge here is how to enforce a security rule on data when data is traversing within the same switch if it is in same Vlan. If you have certain use case where you want to control the communication within the same vlans, then you can take advantage of Private VLAN concept.

[Rob Ingram]

Hi,
No that's not really possible to block traffic within the same VLAN with FTD. As already mentioned, you could use Private VLANs or alternatively you could use VLAN ACLs (VACL) or TrustSec, this is dependant on feature support in your switches.

HTH