LM-WIN2012-DC1

(Domain Controller
DNS/CA)
NAT 192.168.10.40
Allow TCP/80,443,3389

LM-GATEWAY
VLAN32 .40
172.16.32.0/24

.1

VLAN10 LM-HQ-FW1 VLAN192

.1 172.16.10.0/24 192.168.10.0/24
Loopback0 .1 .2 Gi1/1 .251
SW1 Internet
172.16.0.1 Gi1/2
VLAN64 mgmt .250
172.16.64.0/24
Routed FW

Access Control Policy

Allow Network Admin Any
admin1 Block App Bit torrent, Social Network, High Risk/Low Relevance
AD Group: Network Admin Block URL yahoo.com, Gambling, Adult, Gaming
LM-WIN10-TEST1
Block Geo China
Allow Any with IPS, Malware Inspection
Deny Default