To secure east west traffic across guests on a Linux
server, the VM-Series firewall can be deployed with virtual wire,
Layer 2, or Layer 3 interfaces. The illustration below shows the firewall
with Layer 3 interfaces, where the firewall and the other guests
on the server are connected using Linux bridges. In this deployment,
all traffic between the web servers and the database servers is routed
through the firewall; traffic across the database servers only or
across the web servers only is processed by the bridge and is not
routed through the firewall.