Is SSL VPN MAC address host check cannot filter smart phone?

[dickcheung]

Dear all,

I just apply a SSL VPN MAC address host check to my FortiGate 140D firewall. In test, I confirmed we can block the PC which not in allow list, but I don't know why my iPhone 6s connect succesful (thru FortiGate VPN Apps). My iPhone not in allow list.

Is SSL VPN MAC address host check cannot filter smart phone?

Thank you

Mr Cheung 

[gcrisostomo]

Hi Mr Cheung, what's the version of FortiOS you're using?

I'm facing the same problem with version 5.2.7.

[dickcheung]

Hi, There is my FortiOS version.

Version: FortiGate-140D v5.0,build4429,140409 (GA)

Thank you

Mr Cheung

[Shalu]

Hi Cheung, Did you get any solution for this problem, I am also facing same issue.