Interface Security Levels

[pavlosd]

If two interface have the same security level then forwarding traffic between the two is not possible (for security reasons).

Is there a way to allow a specific service only to be allowed between these two interfaces without modifying the security level?

[shannong]

Give the interfaces in question different security levels, configure NAT 0, and create your ACLs on the interfaces to allow the service you want and deny all else.

-Shannon