Hi,
In the WSA, you can configure Identity Policy based on the IP/Subnet and use this Identity in an Access policy to restrict access.
1). Go to WSA --> Web Security Manager --> Identities.
2). Create a new Identity and under "Membership Definition" --> "Define Members by subnet" enter the IP addresses.
3). Now go to Access policies, create a new Access policy and select the Identity created above.
4). Now you can go to "Protocols and User Agents" for the policy and block the protocols which you do not want the PC's the use.
-- Do Rate if helpful
Regards,
Kush