Filter clients by MAC Address

[SecurityPlus]

Helping a small medical practice. They use wireless devices to communicate to the internet to access web based medical records. Would adding Filter clients by MAC Address be worthwhile adding to help insure that only the proper devices connect to the practice SSID? Are there any problem caused by using Filter clients by MAC Address?

Are there other practices that are considered best practice to secure wireless beyond the obvious like strong passwords?

FortiGate 60E, FortiOS 6.09, FortiAP FP221E

[SecurityPlus]

I realize that my question is a bit broad. Are there any problems caused using Filter clients by MAC Address when running FortiOS 6.0.9?

[SecurityPlus]

I tried this and so far it seems to work well. If a host is not allowed on the SSID it treats the correct password as an incorrect password.