Hallo Rene, I don't know what "Half Transparent" means. A Transparent Mode Web Filtering Profile will also respond to a Standard Mode access. You may be able to solve your problem for a short time by adding the VLAN subnets to the 'Skip Transparent Mode Destination Hosts/Nets' box. The best solution is to make it so that even Standard Mode accesses can't get to other VLAN sites by blocking those sites in the Filter Action(s). You might need to make Exceptions for traffic in the same VLAN that passes through the UTM. Pinging is regulated on the 'Firewall' 'ICMP' tab. If you don't want to have the VLANs ping each other, you must disable 'Gateway forwards pings' and then create firewall rules that allow the pining you want. Cheers - Bob
↧