You can't do that short of putting an access-list on the firewall's outside interface and that may be too blunt a tool for what you're asking.
Using hostscan with DAP you can check several things about a client's posture but their public IP address is not among them.
