Create a Firewall rule based on endpoint OS version

[Martins]

Hi,
Can I create rules based on endpoint OS or browser version?
If a user try to access the internet with a specific windows version (like windows 7), the firewall can block him?
Thanks

[PhoneBoy]

Believe you can use Endpoint Compliance to do this.
More specifically, assign a policy to devices with Windows 7 that are unable to access the Internet.

[Martins]

Hi, just to clarify,
I'm talking about my internal users, without any agent installed and not using the VPN.
Endpoint Compliance will work in this scenario?
Thanks

[PhoneBoy]

Endpoint Compliance assumes you're using the Endpoint.
The only mechanism that can block based on OS without the Endpoint would be using IPS.
We do have IPS signatures for many of the legacy Microsoft operating systems, but not Windows 7.