Technical Tip: How to exempt MAC/IP address from captive portal/email collection

It is always possible to exempt some or the other user/IP to be exempted from the captive portal page.

Follow the steps below for the same:

1. Go to Network.
2. Select the Interfaces tab.
3. Scroll down to the option 'Security mode'.
4. Set security mode as a captive portal.
5. Furthermore, under the exempt sources tab, choose the addresses tab and select the MAC/IP address created.

If not already created, it is possible to create it like this, as in the image below:

For email collection exemptions, two firewall policies are required:

Firewall policy with the source address as the IP/MAC to be exempted, and email collection set to disabled:

Snippet of the commands required:

config firewall policy

    edit <ID>

        set email-collect disable 
end

2. Firewall policy with the source address negate option enabled and email collection enabled:

Snippet of the commands required:

config firewall policy

    edit <ID>
        set srcaddr-negate enable

        set email-collect enable
end

Related article:
Technical Tip: How to configure exemptions for Captive Portal on the FortiGate (captive-portal-exempt and security-exempt-list)