Denying access between two networks

Hey Folks,

I am trying to figure out the best way to create a sort of guest network that runs through our content filter [We are not using the UT content filter], and then into Untangle, but is kept separate from our production network.

I have drawn a simple diagram of what I was thinking...

At first I tried just aliasing another gateway on UT, and then blocking between the two with firewall rules, but after trying it, and reading a few threads on this forum, I realized that it wasn't going to work.

So I thought perhaps setting two VLANs on the switch would allow the UT firewall to do the trick. The content filter is in silent bridge mode, so it only allows for 1 internal NIC and 1 External NIC.

Does this sound feasible?

The 10.x/8 network in the diagram is our internal production network. The 192.x/24 network would be the guest network.

Any suggestions/tips would be greatly appreciated. If I have left out any information that would be useful, please let me know. It is Monday morning, and I have only had one cup of coffee. ;)

Attached Images

diagram.jpg (36.5 KB)