Bypass blocked websites by entering PC MAC Address

Hi Buzz Buzz,

Just go to System>Hosts and Services> Mac Host then save the PC/s Mac address.

then create a firewall rule on top of your firewall rule that blocks websites then select those mac addresses on the source networks and devices.

Set this firewall rule to allow all or put a new policy depending on what you want.

XG reads the firewall rules from top to bottom so i think you can figure that out. You can also try to google it or click the help button. I learned most of it by just clicking the help button :)

Please have a look on my capture image. I have done what you said but still gives me the same effect. Thank you for your help.

Buzz,

enable scan http and use firewall rule, web filters to understand what filter is used. Also on previous XG releases, MAC-address firewalls were not working.

Make sure you are running the latest one.

Thanks

Hi Iferrara,

It doesn't work. :(

Thanks!

This is the version of my XG Firewall

SG210 (SFOS 16.05.7 MR-7)

The VLAN is incorporated on my core switch so that whenever the firewall is not attached. The Network VLAN still functional whenever we remove the firewall.

That is the setup we came up and the only problem is the bypass function I have mentioned earlier.

Thank you.

The VLAN is incorporated on my core switch so that whenever the firewall is not attached. The Network VLAN still functional whenever we remove the firewall.

That is the setup we came up and the only problem is the bypass function I have mentioned earlier.

Thank you.

Buzz,

I did not understand well what your network topology is.

Please upload a network diagram.

Regards

It is a simple diagram only from firewall to core then all switches attached to core. The VLANs are not dependent to the Firewall but to my Core Switch.

I have tested your instruction on how bypass firewall rule via mac address and put it on top of my default rule but it doesn't work. :(

Buzz,

send me a PM and I will check it.

Hi Iferrara,

I will upload the diagram very soon so that you can assist me on this.

Thank you.

Ok. Let me know via a PM when you are available.

Regards