Can we fix IP address with MAC address in Fortigate 90D and 200D

[akghauri]

Dear All,

We have created a policy for few users who can use Internet without any restrictions, can we fix their IPs with MAC Address for security reason ?

I did the same through DHCP Server, but smart user can use that IP on his computer and use that Internet Policy.

Awaiting your positive reply in this regards will be highly appreciated.

Regards

[Ali_FCNSP]

I think the best would be to use device identity policy in fortigate to achieve this.

which firmware version of fortigate you are using ?

[echo]

Yes, you can use device groups -- you can create a custom one when you take the device list and edit it (first one of however many). Later you can edit others and add them to the same group and use that group in the policy. It is also possible to change MAC-address of the device though but it depends on user rights. There can also be an option to install FortiClient into the allowed computers and somehow use their UUID's for the policy which is unique but I don't know if that can really be configured like that.