OK thanks. This makes sense. I guess if I'm going to go through the trouble of whitelisting the MAC, I can go and disable randomization on the device and assign it a static IP.
What other way is there if the the IP is dynamic. I thought to create a whitelist for devices I had to add the client's MAC to the custom group. It seems to work fine so far. I was just concerned that it wouldn't continue to work if the iPhone changed its MAC.
Yes, they can just use a VPN. I've told this to several people in my life and many of them write that off as being too difficult to figure out. I even gave my VPN un & pw to a family member with a link to download the app and they still just said "nah."
Some people just can't be bothered to try, I guess.
It's probably accurate. Imagine cubicles and desks smoldering in a filthy, smokey heap, copy machines smashed through the windows, sparking electrical conduit dangling from the ceiling. It's likely madness.
Be the change you want to see.