blocking the device in checkpoint 1590

[Dmitryfd]

Dear colleagues, please tell me, in 1590 under local control, active devices - I block the wifi point Ubiquity UniFi AP-AC-Mesh. But she still distributes the Internet. If I just block the computer, then there is no Internet on it. The task is to block the distribution of the Internet specifically at the wifi point.

[Chris_Atkinson]

Does the Ubiquity perform NAT & DHCP for the clients or no?

[Dmitryfd]

no, just a separate wifi point

[Chris_Atkinson]

If the Check Point sees the client mac-address directly, then blocking the access point likely won't have the desired result.

[Dmitryfd]

This is true, but other clients are blocked without problems. Why doesn't it work with a access point ?

[Chris_Atkinson]

If the traffic isn't "sourced" by the AP it will have no effect in the case where the firewall / client can communicate directly with one another at Layer 2.

[Dmitryfd]

thanks you

[PhoneBoy · Accepted solution]

Block the range of IP addresses the AP distributes via DHCP.

[Dmitryfd]

thanks you