Regras para nao permitir acesso a internet

Question

Bom dia a todos. 
 
 Alguem sabe se &eacute; possivel criar uma regra para nao permitir que alguns dispositivos acessem a internet somente consigam acessar a rede interna da empresa. 
 
 Estou pensando em pegar os dispositivos pelo MAC e criar a regra para que eles nao consigam acessar a internet. 
 
 Tenho um xg135. 
 
 Alguem tem algo paracedo ou sabe como fazer ?

Raphael Alganes · Answer

Hello, 
 Thanks for reaching out to Sophos Community. 
 Configure a drop/deny rule on top from LAN zone, Networks: Could be IP address/MAC or you could also do user-based rule ( of those you want to deny from accessing the internet) to WAN zone networks: Any 
 You may refer to this doc guide on how to configure Firewall rule: https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/FirewallRules/FirewallRuleAdd/index.html 
 Then create a LAN->LAN/DMZ rule below this explicit deny to allow the users to access internal resources only. 
 Regards,