Hi,. Sophos UTM I have completed the setup to block a mac address from accessing the internet however traffic continues to flow to the device. 1.
Table of contents
- Authentication Services
- Block incoming by MAC Address
- Firewall Blocking Spotify Mac Error 17
- Sophos Xg Dhcp Options
- High Performance Computing
Click here to go to the product suggestion community. I have completed the setup to block a mac address from accessing the internet however traffic continues to flow to the device.
In reply to Karlos :. In reply to DavidHudson :.
If you're able to assign a static IP to that device that you would like to block. Then you can use that to create a Web Filter profile that will block access to all. Another option is to add that device again only by IP or hostname to the Transparent Mode Skiplist and it will bypass the proxy and the Firewall rules will apply. Karlos gave you the two possible solutions, David.
Thank you explaining how I can achieve the MAC filtering. It is clear now that I did not understand the rulz and precedence with regards to UTM proxies. In reply to BAlfson :. I did read the rulz before hand to see if I was going about the MAC filtering properly but clearly I did not understand. The UTM architecture article gave me a better understanding on how the rulz are applied and proxies are separate.
Block incoming by MAC Address
It re-enforces I have a lot to learn about the UTM. It's easy enough for the host IP address to be changed on the device itself. MAC spoofing is also possible but usually more difficult to achieve.
Blocking by mac address is available even in the cheapest consumer grade products. It's odd to see this oversight in such a feature full firewall. One should simply be able to define a mac address and assign a rule to block all internet access.
Firewall Blocking Spotify Mac Error 17
No user lists, or other work arounds. In reply to Jay Jay :. Step 2. Please note that MAC address of the original requestor is replaced with the MAC address of the firewall, router or layer 3 switch when the request is routed through them.
Sophos Xg Dhcp Options
So if the user is not directly connected through Cyberoam, Cyberoam will not receive the MAC address of the original requester. Document version — 1. Every comment submitted here is read by a human but we do not reply to specific technical questions. For technical support post a question to the community.
User Help. Site Search User.
High Performance Computing
Email Appliance. Tweets by SophosSupport. Host name - mypc. MAC address — As per your requirement.