Isolate a server

Question

Good afternoon community, and thank you in advance. What is the easiest way to isolate a server where users are (LAN)? 
 And then to grant access to the server, to the users that the administrator wants?

lferrara · Answer

Angel, 
 you can create a VLAN, put the server in it and use XG where firewall rules allow only certain users to pass. Users must be authenticated somehow (AD, LDAP, Captive portal or client athentication agent). 
 Regards

Jaydeep · Answer

Hi PaLmd 
 If the users are in the same subnet as the Server, you will need to create Local firewall rules on Server as traffic would not pass through the Sophos XG device. 
 However, if users are in a different subnet than the Server and if traffic passes through XG for communication between these two different subnets, you can control it by configuring a Firewall rule to allow only certain IPs or Users access to the server.