how to close application for some mobile without using user groups

[pride]

i wanna close facebook and youtube in some mobiles not all mobiles

but i dont want to use user groups

[orani]

You have to group somehow the devices you want to allow or block. For example by ip address, static lease on dhcp, address object or something like that and then make a ipv4 policy to allow or block that group.

[hubertzw]

In 6.2 you can use mac address to group devices as device recognition is removed.

[pride]

i make group device for some mobiles devices but  the problem when i try to add it to source field this error appear to me

One address, address group, or Internet service is required

then i try to add ( all )to source field  but the problem that the policy done for all of devices

[hubertzw]

In 6.2 it looks like this example:

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/485133/mac-addressed-based-policies

What version you have?

[pride]

V 6.0.5

[LForward1]

It is only one way to do it