How to create granular device-based policies?

[echo]

Is it possible to create a policy where identified devices can be used? Currently, I see that (FG100D, 5.2.1) it is possible to create policies using predefined device-groups which are groups where there are all devices having the same OS. I can' t see a way to create any group using just few identified devices in it (and then use it in a policy).

[Dave_Hall]

Going to assume 5.0.x is similar - you define your devices and device groups via " User & Device->Device->Device Definitions" or " ...->Device Groups " . After that, your device(s) or device group will show up when you create a Device Identity firewall policy.