Hello friend welcome to my video
In this video I show you how to block any computer using the internet on Fortigate Firewall
This video provides a procedure to block any Mac address using a device access list
Internet work
MAC address filtering is more secure and more reliable than IP address filtering because the MAC address does not change.
Port 1 is connected to the Internet
Port 2 is connected to the Internal network
Client uses dynamic ip,
so we configure more DHCP Scope to grant Client
Configure default route static routes
Set the Destination IP or Mask to 0.0.0.0 and 0.0.0.0
the Device to the Internet-facing interface
and Gateway is the ip address of the ISP's router
Next, you make a list of computers that are allowed to use the internet
Go to Policy and Objects then select Addresses and select Create New then choose Address
You add the MAC addresses of computers that are allowed to use the internet here
You create a list of computers that will be blocked from using the internet
You add the Mac addresses of computers that are not allowed to use the internet here
Create a policy that allows computers to access the internet
Go to policy and objects then firewall policy and select create new
Give a name for policy
Set the Incoming Interface to the lan interface and the Outgoing Interface to the Internet-facing interface
Set Source as the list of computers that are allowed to use the internet you just created
Set Destination Address, Schedule, and Services is ALL
Make sure the Action is set to ACCEPT
Turn on NAT and make sure Use Outgoing Interface Address is selected
Once the setup is done and you check the results
You can now browse the internet using any whitelisted computer
So how do you want to block computers that do not use the internet
You follow the next steps
Create a policy that does not allow computers to access the internet
Given name for policy
Set the Incoming Interface to the lan interface and the Outgoing Interface to the Internet-facing interface
Set Source as the list of computers that are not allowed to use the internet that you just created
Set Destination Address, Schedule, and Services is ALL
Make sure the Action is set to DENY
Once the setup is done and you check the results
Now you can't browse the internet using any blacklisted computers
In the next part I will practice adding a new computer to the whitelist or disallow list
I hope this video help you to block the internet of computers on Fortigate Firewall
As always
If you found this post useful, then subscribe to my YouTube channel