Deny internet access by OS

[skemena]

hi there,

is there a possibility to create a rule to deny internet acces by specific os?

i want to disconnect a large set windows xp clients from the internet, but allow access fo win7 clients.

thank you

sascha

[goku123]

This is possible through HIP objects/profiles using Global Protect which lets you query the client for different information such as OS type etc. This information is then fed back to the firewall by the GP client and a HIP object/profile can be used in a security rule to match on this information.

[Phoenix · Accepted solution]

Hello Sascha,

Refer the doc,

GlobalProtect Configuration Tech Note

Look for "Host Information Objects and Profiles" section in the above doc which explains the details and information about configuration as needed to block users based on identifying the user pc OS name and details.

Note: This feature needs Portal and Gateway license.

Thanks