This article will show you how to block the traffic of certain users in your network.
1) Will the content filter be able to block all websites except chosen ones based on MAC-addresses?
- Answer: no.
However, you could go around the issue by below steps:
So there is no way to block content filtering by MAC-address because it's IP-based, so what you have to do is to bind certain IP-addresses to the MAC-addresses of the Samsung devices under Configuration -> Network -> Interface -> choose the interface you want and scroll down to DHCP server and bind IP addresses there:
Do not enable IP/MAC binding because it will apply to the whole network.
After you have done that, you can create a Address Group of all the IP-addresses chosen (under Configuration -> Address/Group -> create new).
Next step is to create a content filter profile under Configurations -> Security Service -> content filter -> and Add profile:
And then go to Custom service and tick the Allow web traffic for trusted web sites ONLY:
This will, as the name says, only allow the websites you put into the trusted websites section of the Content filter:
Putting a star in front of .samsung.com will allow all the different domains of samsung.com, for example, app.samsung.com, store.samsung.com etc.
Go and create a Security Policy as following:
LAN1 to WAN
Source: the Address Group you created for the Samsung devices, so this is only affecting them.
Content Filter should be the profile you created.