Deny bridging local :
If you two devices on VLAN 10 and on the same IAP the traffic between those two will not be allowed
Deny routing local :
If you two devices one on VLAN 10 and the other on VLAN 20 connected to the same IAP the traffic between those two will not be allowed