Kerio Control allows filtering by hardware addresses (MAC addresses). Filtering by MAC addresses ensures that specific devices can be allowed or denied, regardless of their IP Address.
The MAC address filter is processed independently of traffic rules.
Configuring the filter
- In the administration interface, go to Security Settings.
- On the MAC Filter tab, select Enable MAC Filter.
- Select the network interface where the MAC filter will be applied (usually LAN).
- Select the filter mode:
- Prevent listed computers from accessing the network — The filter blocks only MAC addresses included in the list. This mode can be used to block known MAC addresses but does not filter traffic of new, unknown devices.
- Permit only listed computers to access the network — The filter allows only MAC addresses included in the list, any other address is blocked. Select the Also permit MAC addresses used in DHCP reservations or automatic user login option if you use automatic user login and DHCP reservation by MAC. MAC addresses allowed by automatic user login and DHCP reservations are not visible in the MAC addresses list (see below).
- Add MAC addresses to the list. You can use the following separator in the MAC addresses:
- colons (e.g.:
- dashes (e.g.:
- no separators (
- Double check that listed addresses are correct.
- Click Apply.
Your filter is fully configured and active.