Block a wired device - Individually or via a list

[Unit]

Fortigate 300E

6.2.7 build 1190

Hi Folks

I would like to block a small amount of windows computers from accessing the internet. I have successfully blocked devices using their IP address but I am looking for alternate ways to block internet access. Can anyone suggest any other options ?

Thanks

[abarushka]

Hello,

In case hosts are in the same broadcast domain as FortiGate you may consider to create MAC address based-policy. Please find the details following the link below:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-the-MAC-address-based-polici...