I have a problem with an application I am working on. The idea is simple, in this application you build up a system of networks that are connected with each other. Example would be:
You have Network A and Network B. They are connected with each other through a tunnel. Now let's say Network A has two computers(AA and AB) and Network B has two computers(BA and BB). You want block computer AA from communicating with Network B.
My usability problem here is that I am using access lists for this. Each network has an access list that says which computer on their network that can communicate with other networks.
How it looks: http://i.imgur.com/DFLAM5z.png
Some users have failed to understand this concept and thought that if you want to block computer AA in Network A from talking to Network B that they should set up an access list on Network B which blocks.
Do you guys have any suggestions to remove this ambiguity or misunderstanding?
EDIT: Since I can't comment. The person who suggested I move the access list to B and deny it there. It still does not solve my problem. Some users still use the function correctly and create an access list at Network A.