New Member

Question

how to block android mobiles using internet

Forum|Forum|3 years ago
April 24, 2023
8 replies
6392 views

Hello friends

i am trying to block android mobiles from accessing internet but nothing is working out. Can anyone help me please. I have also tried fallowing the bellow link but it's not working.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Usage-of-application-control-to-block-Mobile-OS/ta-p/212121#M4688

FortiGate

ebilcari

Staff

Kindly take a look at this article for MAC address filter from device identification:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-how-to-create-the-MAC-address-filter-from-device/ta-p/195523

or NAC policies:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-FortiGate-to-detect-Hikvision-IP-Cameras/ta-p/222299

Emirjon

sandy123Author

New Member

Hello Emijon,

Thanks for your reply the mac based filtering is working fine but what my company wants is that blocking the device directly on wifi like android phone. So it is possible to do it without mac based filter ?

For NAC i don't have forti witches.

Regards,

Sandeep

kgeorge

Staff

Hello Sandy,

Did you try the same thing with Deep Inspection in the Firewall Policy,

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Usage-of-application-control-to-block-Mobile-OS/ta-p/212121#M4688

Kindly try if not done yet as it mostly works.

Regards,

Klint George

sandy123Author

New Member

Hello Klint,

I tried i but it dosen't work after applying this policy the android users are still able to access the internet

Regards,

Sandeep

gfleming

Staff

You're going to need a full-blown NAC solution for this. Yes you can probably block based on MAC address but Android is an operating system that runs on many many many types of devices.

If you have FortiSwitches you could try FortiLink NAC. See here for more details: https://docs.fortinet.com/document/fortiswitch/7.2.4/fortilink-guide/173271/fortiswitch-network-access-control#Defining2

You can detect OS with this. But again it might not be as effective as full-blown NAC like FortiNAC.

sandy123Author

New Member

Hello Graham,

Thanks for your reply but sadly i don't have forti switches

Regards,

Sandeep

gfleming

Staff

Then to do what you want you need FortiNAC. A NAC solution will actively profile every device that connects to your network and determine what kind of device it is. Using policies you can effectively block all Android devices from joining you network using NAC.

There's really no way else around it.

Johnharper

New Member

Simply go to the App info page of that particular app and select the Restrict Data Usage option. 2. A pop-up will open with Wi-Fi and Mobile Data options, you can disable both to completely block the app to use the internet.

Sign up

Login with SSO

Login to the community

Login with SSO