Disclosed herein are
system, method, and
computer program product aspects for implementing a security
group policy. Some aspects of this disclosure relate to a method for applying a security
group policy. The method includes receiving a first frame from a source device and assigning a source security
group identifier (ID) to the first frame. The method further includes generating a second
frame based on the first frame and the source security group ID and identifying a target security group ID for the second frame. The method also includes applying one or more forwarding decisions to the second
frame based on the source security group ID and the target security group ID.