SD-Access Fabric Design with Firewall inside

[poschm3110]

Hello, 

is there any SD-Access Design where a Firewall is located inside the Fabric for SGT to SGT Stateful inspection?

thanks

[jedolphi · Accepted solution]

Hi. Where are the traffic sources and destinations? Applying policy to SGTs in same VLAN ia roadmap, different VLANs is possible (you could use L2VN + firewall as a default gateway), and between L3VNs is possible (see BRKSEC-2116). Regards, Jerome

[poschm3110]

Hello, the L2VN + Firewall as Default Gateway, was the method i was looking for

Thanks and best regards, markus