Cisco FTD Rule deny traffic based on OS

[ty.masse]

Hello, Is it possible to create a rule in FTD to deny traffic to a URL based on a combination of OS and source network? In the FTD dashboard it keeps track of the OS's that flows thru it.  I want to create a rule to deny traffic based on the OS and source network.  I didn't find where that can be done in the ACP.  Is this possible using an Intrusion policy?

Thank you.

[balaji.bandi · Accepted solution]

personally FTD alone can not do this, you need some kind of tool identity like ISE can do the job.

[ty.masse]

Thanks for your reply.  That's what I thought, but wanted to be sure.

[MHM Cisco World]

Friend you can 

https://rayka-co.com/lesson/cisco-ftd-network-discovery-policy/

Use network discovery policy 

MHM