When multiple bridge groups are configured in transparent mode on a Cisco Secure Firewall Threat Defense appliance, which communication is blocked from the bridge groups?