VLAN as Firewall Zones

[paulo.roque]

Hi.

I usually separate firewall zone with different physical LAN in different switches.

What do you think of separating firewall zone with VLANs in the same switch/chassis?

Paulo

[donewald]

Paulo,

Many do this but it all depends on your Security policy. If physical separation is a requirement is needed (some security certifications require this as well) then you cannot do this. Also the risk of someone compromising your switch and being able to add/remove ports from your secure VLAN would be there.

Hope this helps you,

Don