Access rule for guest network

[immen]

Hi,
I'm trying to setup guest network and is there any efficient way to create access rule? I want that only http is allowed to the internet (all addresses behind the external interface). Do I have to first create drop rule for all internal addresses and after that accept traffic from guest network to <any> useing http protocol? Can I some how define external interface into rule?

Any advices?

Thanks,
Jani

[mcnallym]

What you need to do is negate the rule.

To do this create a group that contains all of the private networks that are included in your own network, this includes internal and DMZ networks.

Then write the rule as

src = guest_network
dst = newgroup

Then right click in the destination coloum and select the negate cell.

What this does is create a rule that allows the guest access anywhere other then your internal and dmz networks