FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Mohammed_Feroz
Article Id 249855
Description This article describes the various options for configuring MAC address under a single MAC-based address object 
  FortiGate.
Solution

MAC address can be added below:

 

1) Adding a single MAC address.
2) Adding a range of MAC addresses.
3) Adding a wildcard MAC address.

 

In cases where the network is managed based on the source MAC address, it can be a little tedious process to add  MAC address-based object for each user and possibly call it under group.

The above options can be helpful to manage the group under a single address object 

 

mac object.jpg

 

In the above example, 2 MAC based address objects have been configured.

 

1) Office_PC: that includes one MAC address, a Range of MAC addresses, and a wildcard of the MAC address.

 

2) mac_block: a complete wildcard MAC address so it can be used to block all mac addresses in a deny policy.

 

 
mac policy .jpg