Dear @Frickeldave 

Frickeldave wrote

Hi,

I currently have a switch ACL blocking traffic from the normal network (51) to my IoT network (54).

 

 

 

Now I want to explicitly access a system on the 51 via SSH from one of the IoT machines in the 54 network (i.e. the opposite of the rule).Unfortunately this access is blocked. Even if I create another rule and set it to position 1, the access does not work.

 

 

Only if I switch off the rule "Normal to IoT block" it works.  How can I achieve that the basic access from the normal network to the IoT network remains blocked, but this one communication path is open?

Make sure you have bi-direction Permit rules on position 1 and 2. So allow the system to the IoT IP, also allow the IoT IP to the system.