Mobile deny for specific network

[Alxndr3]

Hi!

I would like to deny the access to the internet for smarphones.

I've created a device based rule, for while to block the access from all networks, however it's not working.

[Dave_Hall]

I don't now enough about 5.6.x nor know if using "any" for source interface includes "vlan" sub-interfaces.  For policy #31 you may need to specific the mobile vlan sub interface as source interface.  Anyone else care to confirm/shed light on this.