I have configured vTM with ip forwarding and ip transparency and act as a default gateway for all real server. All real server on different vlan can reach internet through vTM that act as a router. Reverse side of this is that all vlan can reach all other vlan. It's possibile to manage a routing policy? Ex. eth0 external interface       eth1 internal interface with Vlan 10 and Vlan 20 defined        Vlan10 --> eth0 pass        Vlan20 --> eth0 pass        Vlan10 --> Vlan20 block        Vlan20 --> Vlan 10 block        eth0  --> Vlan 10 pass        eth0 --> Vlan 20 pass   All that with iptables can be done easy as iptables -A FORWARD -i Vlan20 -o Vlan10 -j DROP iptables -A FORWARD -i Vlan10 -o Vlan20 -j DROP ... View more