Setup an access list on the router allowing them to communicate in the first place. If that is the 4500 set it up there.