How to block users via MAC Address in FortiGate 100D

Hello. I'm also looking for this information on the FortiGate 100D.

Some more information that should help:

- Under User & Device > Device > Device Definitions > found the MAC Address and IP (my test cell phone on our internal WiFi network) and created an Alias

- Under User & Device > Device > Device Groups > Created a New "Blocked_MAC" group, and placed the new Alias in it

- Under Policy & Objects > Policy > IPv4 >  Created a New policy of:

--- Incoming: ANY / Source Address: ALL /  Source Device Type: "Blocked_MAC" / Outgoing Interface: ANY / Destination Address: ALL / Schedule: ALWAYS / Service: ALL / Action: DENY / Enable this Policy: ON

I tested my cell phone on the WiFi network and am still able to surf the Internet successfully.

What am I missing?

Thank you in advance.