How to block Unknown Mac Addresses

4 replies
5358 views

Hello,

I have a Fortigate 90D. I have been asked by the management to setup policies to block internet access to specific users.

I successfully managed to do this,however, I recently discovered that the users are bypassing the IPv4 Policy by Mac spoofing.

Kindly assist on this.

6.0

orani

New Member

You can create devices on your fortigate with mac's that you want to allow traffic and then create a policy and set the source with attributes all and the mac's you want to allow.

lmumbuaAuthor

New Member

I have already done this. Although some of the users keep changing the Mac address of their devices.

Therefore the policy will not be useful once they change the MAC address

OneOfUs

New Member

You may need to do things outside the realm of the firewall like:

[ul]

802.1x authentication on the wired/wireless network

DHCP reservation / filter (Allow / Deny)

Sticky MAC on the switch ports

HR Policy: termination of offending employees[/ul]

Sign up

Login with SSO

Login to the community

Login with SSO