Again: that is a problem. If that is possible your internal network is insecure. The castle and moat model is obsolete anyway. Most attacks today come through

Again: that is a problem. If that is possible your internal network is insecure. The castle and moat model is obsolete anyway. Most attacks today come through "pulled" vectors that bypass the firewall. If you rely on a physical network perimeter for security your security is an illusion.