Description
This article outlines the key concepts of an on-fabric detection rule based on the Local IP and GW MAC address.
Scope
FortiSASE.
Solution
Go to -> Configuration -> Endpoints -> Profiles
Select On-Fabric rule sets.
Select Create New and configure the On-Fabric detection rule.
Set the Local IP of the user and the user GW MAC address.
Go to the user machine, open a CMD prompt, and enter ipconfig to get the user IP address, and arp -a to get the GW MAC address
Now, return to the profile and enable 'Bypass FortiSASE when endpoint is on-net', then select the On-Fabric detection Rule configured.
Now, return to the profile and enable 'Bypass FortiSASE when endpoint is on-net' and select the On-Fabric detection Rule configured.
