macOS HEP - block non compliant machines from RA VPN

[aka]

Hi everyone. I need to block connection to the RA VPN on macOS when the device status is "not compliant".  With a standalone remote access client, I know that configuring SCV would help,  but we are using harmony endpoint client, which doesn't support SCV. 

Is there any native way to block VPN access when the harmony agent reports with non compliance status?

[PhoneBoy]

I believe what you're looking for is "Cooperative Enforcement."
This is enabled/configured in the relevant gateway object under Other > Cooperative Enforcement.
https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_LoggingAndMonitoring_AdminGu...