1) Will the content filter be able to block all websites except chosen ones based on MAC-addresses?
- Answer: no.
However, you could go around the issue by below steps:
So there is no way to block content filtering by MAC-address because it's IP-based, so what you have to do is to bind certain IP-addresses to the MAC-addresses of the Samsung devices under Configuration -> Network -> Interface -> choose the interface you want and scroll down to DHCP server and bind IP addresses there:
Do not enable IP/MAC binding because it will apply to the whole network.
After you have done that, you can create a Address Group of all the IP-addresses chosen (under Configuration -> Address/Group -> create new).
Next step is to create a content filter profile under Configurations -> Security Service -> content filter -> and Add profile:
And then go to Custom service and tick the Allow web traffic for trusted web sites ONLY:
This will, as the name says, only allow the websites you put into the trusted websites section of the Content filter:
Putting a star in front of .samsung.com will allow all the different domains of samsung.com, for example, app.samsung.com, store.samsung.com etc.
Go and create a Security Policy as following:
LAN1 to WAN
Source: the Address Group you created for the Samsung devices, so this is only affecting them.
Content Filter should be the profile you created.