Add logical interface to source & destination options in firewall

It would be really helpful if the firewall allowed one to specify a logical interface in addition to the current source and destination options. That would make it a lot easier (and more foolproof) to specify rules that block traffic between VLANs and/or VPN nodes. Having to enter by IP address/network is less ideal in these cases.