I know that on a 2950 protected ports cannot talk to each other on layer 2. That is fine.
My question is, does anyone have a setup where they use a Checkpoint Firewall on Solaris as a layer 3 device with a rule base allowing contact between protected ports on layer 3?
Maybe this is more of a Solaris group question?