Hi,
we are trying to get the following scenario to work.
- ASA5506 in transparent mode (L2 filtering)
- on the inside zone we have a switch with several hosts connected to that switch
- the hosts get an IP address from a DHCP server which is not under our control
- we want to restrict certain machines on the inside from going to the outside zone
As we do not know the IP addresses up front we thought we can use MAC addresses based filtering to block the traffic.
Filtering on MAC address does not seem to be possible on the ASA5506.
Is there a different way to do this?
Regards,
TF
