topic Re: Deny internet access by OS in General Topics

Deny internet access by OS

skemena — Mon, 09 Dec 2013 07:53:55 GMT

hi there,

is there a possibility to create a rule to deny internet acces by specific os?

i want to disconnect a large set windows xp clients from the internet, but allow access fo win7 clients.

thank you

sascha

Re: Deny internet access by OS

goku123 — Mon, 09 Dec 2013 15:03:15 GMT

This is possible through HIP objects/profiles using Global Protect which lets you query the client for different information such as OS type etc. This information is then fed back to the firewall by the GP client and a HIP object/profile can be used in a security rule to match on this information.

Re: Deny internet access by OS

Phoenix — Mon, 09 Dec 2013 15:22:17 GMT

Hello Sascha,

Refer the doc,

GlobalProtect Configuration Tech Note

Look for "Host Information Objects and Profiles" section in the above doc which explains the details and information about configuration as needed to block users based on identifying the user pc OS name and details.

Note: This feature needs Portal and Gateway license.

Thanks