Lan to Lan rule

Question

Hi, 
 I am trying to set a rule for a old printer on our LAN that talks to software on users computers but i am having no luck. 
 My other rules all work, but they are generally LAN > WAN or vice versa, this is my first one where the log is showing LAN address for source and destination. 
 I have tried making the rule very open as using ANY for Source / destination etc and still no luck. 
 The Source IP is always the printer on 192.168.10.231 and the destination can change. 
 The source port in the log is always 515 and the destination appears to vary between 54021 - 55022 
 If anyone can point out where i am being an idiot that would be great. 
 
 ignore the description on the rule..

Ashok Sethi · Answer

I see nobody else explained why LAN to LAN policy traffic doesn't do anything, or ever will. I will try to explain this as simply as possible. 
 
 LAN to LAN to me says that you are trying to govern traffic going through the same subnet with a router, this is a problem because the fact that if the other device is on the same LAN/subnet, then it would use the switch and MAC address to directly communicate with the device. If you can imagine, this means the Sophos router is not the destination of the traffic, and therefore it never has any ability to manipulate the traffic. 
 
 An example of what would work, is let's say we had two networks, WLAN 192.168.2.0/24 and LAN 192.168.1.0/24. The same policy but instead going LAN to WLAN, would work because of the fact that communication needs to go through the router to arrive at the destination. If there is a specific reason you want to use the Sophos router to govern traffic between specific devices, they must be on two different networks. This is how routers are fundamentally designed, I hope this helps.