We are providing an Internet connection to 5 users in an office space,
but don't want any of those users to be able to access each others'
computers or files.  Though disabling file sharing on the workstations
is ideal, we are part of the property management company and are
solely providing a network connection to the systems, without
providing IT support for the workstations.  We purchased a SonicWALL
TZ-170 thinking that this would permit a rule that would allow
restricted access between LAN ports, but it does not function in that
capacity.  Although you can create the rule through the interface, it
is not enforced.  Essentially the SonicWALL is a firewall with
attached 5 port switch.  I'm thinking that a managed switched with 5
VLANs for each of the workstations might solve the problem, but since
they'll have the WAN connection in common, I'm afraid that it might
route across the firewall anyway -- essentially leaving us in the same
situation.  What would be the best solution for providing this level
of LAN protection given the existing SonicWALL TZ-170 equipment (I
know that they offer a switch with PortShield that lets you managed
each port individually, but I'd prefer not to buy this equipment)?  I
would welcome either a workaround with the SonicWALL TZ-170 or another
piece of equipment that could go between the TZ-170 and the users.