How do I assign users/groups based on MAC addresses?

Question

Basically in my Sophos XG17 firewall rules I have the option to MATCH IDENTITY per firewall rule and I would like to group specific devices via MAC addresses and then assign them to those specific firewall rules. How do I go about doing that?

This thread was automatically locked due to age.

Myth-M · Answer

Hi, 
 Your requested feature for user and mac binding is not supported as of now, 
 But it's coming as part of synchronized security with Sophos central Endpoint, with lateral movement control as well. 
 Wait for coming SFOS builds. 
 Regards,

Panagiotis Vakerlis · Answer

It's not hard, though it's a little time consuming. Basically you have to go to Network>DHCP>your dhcp server and on static mac mapping add the name, mac and static ip you want. Then you go to authentication, clientless users and add one with the same ip. Enjoy a cold beer(unless you have more work to do, beers and IT do not end well) 
 
 The name you added on the clientless will be the one you will filter through the firewall