Some hosts should be limited in internet access and/or local access or simply be restricted in some way because they are untrusted.
I'm looking for a possibility to isolate untrusted inside LAN using any approach applicable. How do people isolate undesirable hosts in their networks? Cheers!