Skip to main content
Julien87
Contributor II
December 20, 2022
Solved

MAC device and source zone

Hi,

 

the feature 'config user device' is removes in the last version 7..

 

Have you an solution to filter sourceIP and MACDevice in one rules ?

 

I have try SourceIP and DeviceMAC object, but this one allow all source network...

 

Best regards

 

alif
alifAnswer
Staff
December 20, 2022

I guess that's not possible.

The firewall address can be of different types. However, the srcaddr under the firewall policy will allow/deny traffic based on 'OR' basis.

7 replies

alif
Staff
Staff
December 20, 2022

Hi @Julien87,

 

The command "config user device" has been removed since FortiOS 6.2 version.

 

Please check the below link if it helps.

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/645289/device-detection-label-changes-6-2-1

Julien87
Julien87Author
Contributor II
December 20, 2022

hi @alif

yes i see that. But a solution exist for use mac object address ? For have the same usage ? 

julien 

alif
Staff
Staff
December 20, 2022

You can define the MAC address in the same way as an IP address.

 

Please select the type "Device (MAC Address)" and mention it in the relevant firewall policy.

https://docs.fortinet.com/document/fortigate/7.0.9/administration-guide/407159/mac-addressed-based-policies

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT