Understood. So, in your ideal scenario, how would you allow a wireless client to access a printer on the same VLAN - a firewall rule for traffic from the VLAN subnet to the printer?
Cheers - Bob
Sorry for any short responses. Posted from my iPhone.
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
If the traffic is bridged to the LAN,/VLAN, the UTM won't be able to control the traffic (it'd be switched at layer 2 and never sent to the UTM). What I would do there is use an IP ACL on the switchports. You want the traffic dropped as close to the source as possible so that you keep the unnecessary traffic off of any uplinks/bottlenecks.
If the traffic is bridged to the LAN,/VLAN, the UTM won't be able to control the traffic (it'd be switched at layer 2 and never sent to the UTM). What I would do there is use an IP ACL on the switchports. You want the traffic dropped as close to the source as possible so that you keep the unnecessary traffic off of any uplinks/bottlenecks.
