https://community.sophos.com/sophos-xg-firewall/f/discussions/131073/xg125-vlan-to-lan-trafficcant figure out what I&#39;m missing... XG125 I have APX120 connected to port5. tagged vlan is turned on. port5 192.168.5.1 3 vlans are on port5 vlan5 - 192.168.55.1 vlan10 -192.168.58.1 vlan20 - 172.18.58.1 APX120 is tagged vlan5 my wifien-USTelligent Community 12https://community.sophos.com/thread/481803?ContentTypeID=1Sat, 06 Nov 2021 18:21:07 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:b3595fcf-4f83-4ca6-bce0-ca7256ba1b4aLuCar Toni<p>Likely the rule is not correct. #Port Objects are only the IP of this interface, which likely is never the origin of traffic. Simply use the zone, you used for the VLANs and &quot;ANY&quot;. The Zone is enough to limit the access.&nbsp;</p><div style="clear:both;"></div>