Re: Blocking a user by MAC address in ISA Server 2006

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Ram,

ISA Server 2006 cannot filter traffic by MAC address. However, a plethora of hardware devices (switches, routers, etc) and software products are capable of doing this for you. Exclusive MAC address filtering isn't the best answer, in my opinion, as MAC addresses can be spoofed quite easily and only a very small office could receive any benefit from doing an inclusive MAC filtering strategy.

What exactly is the problem? I specialize in security and would be happy to help you any way I can. If you could describe your network scenario to me along with who is gaining unauthorized access to Internet resources and how they're believed to be doing it, preferably through email, I'd be able to come up with more specific solutions.


Sincerely,

Tyler Cobb
MCSA 2003: Security

"Kiwi" <Kiwi@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:7033C990-EFAC-445F-9664-231143906AE1@xxxxxxxxxxxxxxxx
Is it possible to block internet access to unauthorised users based on the
MAC address of the workstation?

I have checked Firewall Policy rules and could only find All Users and
Authenticated Users

Thanks

Ram

.



Relevant Pages

  • Re: Intrusion possible?
    ... >> have more than one security measure (ex. ... >True but MAC address filtering will add all of about 3 seconds. ... That's caught 3 different spammers at one hot spot. ...
    (alt.internet.wireless)
  • Re: belkin 54g router
    ... using128 bit wep and mac address filtering for ... I'll assume Windoze XP for the client. ...
    (alt.internet.wireless)
  • Re: kern/109815: wrong interface identifier at pfil_hooks for vlans + if_bridge
    ... Now we have two cases for behaviour of filtering. ... So now we can filter packets treating dst interface ... and do not take in to account the dst MAC. ... bridge that is serving around 60 hosts. ...
    (freebsd-net)
  • Re: MAC filtering on conexant router
    ... >I don't understand how to filter based on MAC addresses. ... usually some help on the manufactory web pile. ... Got to the Security or Filtering web page. ... point wireless links. ...
    (alt.internet.wireless)
  • Re: DHCP restriction via MAC...
    ... > denial of service attack to legitimate computers if the DHCP scope is used ... MAC address filtering just raises the bar by preventing rogue ... >> attacker can take a valid network card or spoof the MAC address to ...
    (microsoft.public.security)