L2 to L4) feature restricts access to sensitive network resources by denying packets based on source and destination MAC address