topic Re: Is there a way to white list a user by the MAC address in Cisco Fire Power? in Network Security

Is there a way to white list a user by the MAC address in Cisco Fire Power?

JBrav0 — Thu, 10 Jun 2021 19:53:58 GMT

We have a Cisco firewall that can be accessed through the web interface called Firepower. I discovered that there is a geolocation rule that blocks visitors from South Africa. The issue is that we recently got a student from there that cannot visit our website through any computer (other than a mobile phone) and I believe it's because of the firewall. I already verified with my ISP that they aren't blocking anything.

I would like to keep the rule, but white list them so they can at least access it. Is there a way to set up the rule-based on a MAC address? this seems to be the simplest way in my mind to have him visit with his own computer.

Re: Is there a way to white list a user by the MAC address in Cisco Fire Power?

MHM Cisco World — Thu, 10 Jun 2021 23:57:34 GMT

As I know you can use SI in FTD to config white list and use DNS to control this whitelist depend on domain.

Re: Is there a way to white list a user by the MAC address in Cisco Fire Power?

Marvin Rhoads — Fri, 11 Jun 2021 09:06:29 GMT

A MAC address doesn't convey across the Internet unless it's encapsulated in something like a remote access VPN.

You could give them a VPN connection (which is not affected by Geolocation rules).

A much simpler solution is to just have the student use an inexpensive commercial VPN service like Tunnel Bear that allows them to choose their apparent country of origin.

Re: Is there a way to white list a user by the MAC address in Cisco Fire Power?

JBrav0 — Fri, 11 Jun 2021 15:00:20 GMT

I didn't think about this, I could test this with the student and if it works I will probably get the college to buy a handful of licenses for students on rare occasions like this.