This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MAC HOST Limit - XG330

Hi!

I´m Daniel Celestino, from Argentina.

I work on a government´s institution of the police of Buenos aires. We have about 1800 cadets and 400 users active in the whole institution.

I actually have a SG330 and I´m deploying a XG330. In the SG330 - UTM 9, have a MAC ADDRESS LIST with 1783 MAC ADDRESSES.

When I want to import the same MAC ADDRESSES to the XG330 - XG 18.0.5, the following "error" appear:

"Maximum 1000 MAC addresses are allowed in MAC list"

So, is there a way to raise the limit? I cannot believe that the New SO "has less features" than the older.

Thanks in advanced.

Regards,

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 3 years ago +1 verified

There is no current solution to increase this, but you can simply expand it into two objects. MAC List 1 and MAC List 2. Simply do this by using the XML Import/Export feature. See: community.sophos.com…

0 FormerMember over 3 years ago

Hi Raiden86,

Thank you for reaching out to Sophos Community.

Sophos firewall allows adding a maximum of 1000 MAC addresses in MAC host configured with 'MAC list'.

You can create one MAC host with 1000 MAC addresses and create another MAC host with the rest of 783 addresses.
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 3 years ago

There is no current solution to increase this, but you can simply expand it into two objects. MAC List 1 and MAC List 2.

Simply do this by using the XML Import/Export feature. See: community.sophos.com/.../creating-xml-objects-with-notepad-for-mass-import

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Raiden86 over 3 years ago in reply to FormerMember

Hi! Thanks for the quick reply. I did that. But, it´s a pity that an actualized version of Sophos has "less features". And, it´s a little dificult to split into two Lists, because I have ONE wireless SSID for the entire students across the campus.
Thanks anyway.
Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Raiden86 over 3 years ago in reply to LuCar Toni

Hi! Thanks for the quick reply. Yeah, As I said in my previous reply, its a pity I cannot add them in one list just like SG UTM9. I have to think another solution.

Thanks again!

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 3 years ago in reply to Raiden86

You actually maintain a MAC List of students? That sounds really stressful? And this list is the basic "NAC" for Wireless?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Raiden86 over 3 years ago in reply to LuCar Toni
Yes.. I have more than 2000 netbooks in my infraestructure. My students are very smart to bypass my security. Also, The teachers does not collaborate keeping in secret the Wifi password for their notebooks. So, I had to have a Mac list for all my Wireless setup. I have 67 AP´s across the campus. And, we have at least, 50 digital rooms, each one with 1 AP and 30 netbooks connected.
You can Imagine that splitting into two SSID is tedious..
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 3 years ago in reply to Raiden86

Of course. What about WPA2 Enterprise? Wouldnt this be a smarter solution in the long run?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel