XG 550 user capacity

Hi Munish thakur

MAC base firewall rule will not work in case you have L3 switch between Sophos XG and the user PC.

Regards

I would suggest using some kind of NAC / NAP solution for this. For instance macmon.

NAC / NAP solution ? i dont get u 

can u please explain ?

Hey Munish thakur,

This all depends, on what module are currently being utilized by the appliance and how many users remains active on an average.
Your partner can also help you determine, based on your organization's requirements, which devices will be minimum, recommended or optimal to handle your organization's network traffic.
> The New Sophos Firewall Sizing Tool - https://partnernews.sophos.com/en-us/2021/12/products/available-now-the-new-sophos-firewall-sizing-tool/

I was thinking that your wish to statically assign IP-addresses to specific MAC-addresses has security reasons. This assumption led me to my suggestion, that with around 3000 systems there would be better solutions to solve that in an automated way.

NAC = Network Access Contol

NAP = Network Access Protection