edge - firewalling off a network segment

[kerbros]

I've got a network segment that that needs to be firewalled off from the rest of the network. What’s the best way to complete this task?
I'd like to do it using these requirements:
-Use an edge [edge W series, unlimited]
-without NAT [I can be swayed on this if necessary]
-Keep the same IP scheme [class C private IP space]

For extra bonus points would this setup be served by being centrally managed or stand-alone?

I'm looking at either segmenting off the network via the DMZ functionality or doing something in regard to the built-in Vlan capability on the edge.

Thoughts?

[RayPesek]

What and how many devices will be isolated and for what reason?

I'm using an Edge X to isolate a manufacturing process control network from the LAN/WAN environment. It's managed by a SmartCenter in another state and it works well.

If it's not too many devices, I'd put the isolated devices on a different IP network and use static NAT so they seem to have the same IP address they have now.

Ray

[chillyjim]

As of now the Edge box is a routing-only firewall, so you need to take that into consideration. The 7.x firmware should have layer 2 firewalling (bridge-mode).

I have customers managing from the web UI and from SmartCenter (one customer doing both depending on the edge box). Currently (6.5.35 firmware) you are limited to 100 rules. Prior to 6.5 its 30 rules in the web UI. You do not have that limit with SmartCenter. Also with SmartCenter you can update the SmartDefense and AV if you use them.