Hi PANgurus,
We have a query whether we can able to block a specific device from Connecting our Global Protect VPN by using the Device MAC Address.
Please review and share us with your thoughts. Awaiting for your reply !!
Best Regards,
Sahul Hameed
top of page
All things Palo Alto Networks
Forum: Forum
bottom of page
as far as i know you cant do that based on the mac, but you could roll out machine/client certificates and then restrict access to only the devices that have an appropriate certificate installed
if it's a certain 'group of devices (i.e. all android phones) you can make a client profile for those devices and either quarantine them, or make logging in impossible for those devices
the client connects using virtual interfaceso the physical mac is not seen by the firewall.
Can you share the use case for blocking a MAC address? maybe there's a different solution