InterVlan routing standard security guidelines

[farjad_feroz]

Intervlan routings enables routing between vlan but is there any standard guideline for that I mean if every other VLAN end up communicating with other VLAN one APT or rouge access point can compromise your whole network. In this regard I want to know what CISCO say about it. I also wanted to know what are the potiential options to restrict routing apart from ACLs because I really hard to manage ACLs when you have more than 50 VLANs

[Marvin Rhoads]

Defense in depth - protect your perimeter, segregate your network, protect your endpoints. Use all the elements of the Trustsec architecture you can - i.e. Security Group Tagging etc.

Develop, implement and enforce a BYOD policy to limit what gets on your network and what it can access. A product like Cisco ISE does this quite well.