Facilitating secure, scalable, segmented layer two communications

A system for reducing data storage requirements associated with facilitating secure, scalable, segmented layer two communications, the system comprising:

• a first set of computing devices that are part of a first Virtual Local Area Network (VLAN) that is associated with a first Security Group Tag (SGT);
• a second set of computing devices that are part of a second VLAN that is associated with a second SGT, wherein the first SGT is different from the second SGT;
• a managing firewall comprising (i) one or more network traffic policies indicating valid and invalid network traffic communications between computing devices and (ii) device profiles;
• one or more processors and non-transitory computer-readable media comprising instructions that, when executed by the one or more processors, cause operations comprising:
• receiving a communication request, from a first computing device, at a first dynamically configured port mapped to the first VLAN, to communicate with a second computing device, the communication request comprising a source address associated with the first computing device and a destination address associated with the second computing device;
• inserting, based on receiving the communication request at the first dynamically configured port mapped to the first VLAN, the first SGT into the communication request;
• determining, based on the destination address of the communication request, a second port to forward the communication request to be received by the second computing device, the second port being mapped to a third VLAN;
• in response to determining, based on an assigned SGT to the second port, that the third VLAN is the first VLAN:
• preventing forwarding of the communication request, via the second port, in lieu of forwarding the communication request to the managing firewall to verify whether the network traffic communication between the first computing device and the second computing device is valid;
• in response to determining, based on the assigned SGT to the second port, that the third VLAN is the second VLAN:
• forwarding the communication request, via the second port, to the managing firewall;
• verifying, at the managing firewall, based on (i) the one or more network traffic policies and (ii) a first device profile corresponding to the first computing device and a second device profile corresponding to the second computing device, that the network traffic communication between the first computing device and the second computing device is valid;
• and
• in response to the network traffic communication between the first computing device and the second computing device being valid, causing forwarding the communication request to a gateway address associated with communicating with the second computing device.