Filtering access by operating system

[SimonInOz]

Hi,

 

We use Sophos UTM9, Ruckus Wireless and Windows Radius authentication. I am wondering if there is any way to filter (block) clients based on their operating system? Also, if I have a list of mac addresses, can I block based on that? How are others doing this?

 

I want to prevent people coming in and launching their own linux distributions from a usb key etc, or using their own devices which are not allowed. Many thanks for any advice/options.

[bald_pig]

Sounds like the easiest way to resolve this would be to add the domain computers group to the conditions of your radius authentication, so only domain machines can connect.

[SimonInOz]

We do have this currently set, also users. I was hoping for some other ways to block. Cheers

[bald_pig]

This would only prevent internet access if set up correctly. If you don't want them connecting to your network at all, you can use RADIUS to secure most managed switches, to prevent the device being given network access at all

[SchoolsBroadband]

I can't comment on Sophos i'm afraid but I do know this is a feature available on Fortinet firewalls.

 

Dave

[Wave9_Lee]

Hi,

 

We use Sophos UTM9, Ruckus Wireless and Windows Radius authentication. I am wondering if there is any way to filter (block) clients based on their operating system? Also, if I have a list of mac addresses, can I block based on that? How are others doing this?

 

I want to prevent people coming in and launching their own linux distributions from a usb key etc, or using their own devices which are not allowed. Many thanks for any advice/options.

 

This might help?

 

https://community.sophos.com/kb/en-us/120345