So we're using VCD (5.1.2) for software testing, and we need to make sure that our client can communicate to our server via a web proxy. We did that in Lab Manager by creating an isolated (no routes) network for the clients, with a proxy server on both networks, so that we were certain that any communication that occurred was going through the proxy. We can do this in vcd as well (see vcdIsolatedNetwork1.png), but to make it even easier, I was hoping to use the built-in firewall to do it (vcdSingleNetwork.png). However when I tried this, I couldn't get the firewall to block anything.
I'm guessing that the firewall is designed to affect external stuff (communication between different networks/port groups), not internal stuff (communication inside a network/port group). Is there a way to get the firewall to block stuff this way, or do I have to use two networks?