Skip to main content
Tyler_Durdan
Tyler_Durdan
New Member
January 7, 2020
Question

Separate web filtering for MAC Device group possible?

  • January 7, 2020
  • 1 reply
  • 3038 views

I have a FG100D that we would like to enable separate web filtering criteria for a group of devices.

example: We have 10 tablets in a kids area and 20 PC's in an adult area all using the same wireless SSID and going through the firewall. We want the adults PC's to be able to be open to almost all content but would like the 10 tablets to be highly filtered and limit the content or go through Google Safe Search.

 

I know how to create a User Group based on MAC addresses, but is there a way to put separate filters on that group? I am open to other ideas as well.

    1 reply

    _aey_
    _aey_
    New Member
    January 8, 2020

    Hi,

     

    You can create multiple web filter profile. Under System>Feature Visibility you should enable "Multiple Interface Policies". Then under Security Profiles>Web Filter in the right side click plus(+) icon.

     

    After create a new profile, you can use this profile in the policy. In the source part you can use Device Category. But before use device category you should enable device detection feature in the incoming interface.

     

    Dave_Hall
    Dave_Hall
    New Member
    January 8, 2020

    @Steve (aka Tyler):

     

    You can create/use different web filter polices on the same subnet - just create a firewall policy using the source (all) and device group (directed to your WAN connection).  Apply any UTM profile/features on this firewall policy then move this firewall policy up in the firewall chain so it is processed. 

     

    Alternately, just create a second or separate wifi network that has different UTM profiles applied to the traffic.  This approach does not require the need to reserve device mac addresses  - you can have one for "staff only" and another for "students only".  And if need be, you can lock down or restrict the "staff only" wifi to known devices (mac addresses).

     

     

    Terms & ConditionsAccessibility statement