Cisco FMC/FTD 7.x -> Can you build rules using mac addresses?

[mik31]

We recently updated FMC and our FTD's to code 7.x.

Are we able to build rules using MAC addresses yet?

[balaji.bandi]

Are we able to build rules using MAC addresses yet?

have upgrade to latest due to this ?

[mik31]

Sorry? We upgraded for other reasons.

This is more of a question, is it possible now?

[balaji.bandi]

Are we able to build rules using MAC addresses yet?

if you looking to Build ACP rules using MAC address - unfortunatly never done myself ?

I never heard that, how FW know the MAC address of end device ?

[Marvin Rhoads]

No. You need to use Layer 3 and above in your rules (protocol, IP address, etc.).

Most often the client is not on the same subnet as the firewall's interface so the MAC address would not be known in that case.

[Marius Gunnerud]

If you are looking to create access rules based on MAC then best to look into ISE or similar product