Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi...i am a new user here. I will say if you are able to plug into that core switch, setting up a SPAN would be able to accomplish this. Source interface should be the one facing the FW, and you can filter the users' VLAN like you suggested.
