VLAN & ACL implementation on 2960s?

[Parlance_]

A company with a flat network has an estate of 2960 switches. They also have Sophos UTM 425 devices with 4 spare ports.

They need to implement VLANs with ACLs to segment the network. Is it possible to implement the ACLs on the switches? Or would the VLANs need to be trunked and the Firewall provide the access control implementation?

Or will they need to upgrade the switch estate to 3960s?

Look forward to your comments.

PL

[Brandon Svec]

Hi Par, this is small business security.  You should probably move your post to:

https://supportforums.cisco.com/community/netpro/network-infrastructure/switching

for better responses.

-- please remember to rate and mark answered helpful posts --

[Parlance_]

I was unable to move the discussion so created a new one here

https://supportforums.cisco.com/thread/2260014

[Collin Clark]

How many switches and VLANs are we talking about? The 2960S can do some basic routing and ACL's, but it's an access switch and could get taxed with a decent volume of traffic.