WSA Use of device FQDN in Identity or Access Policy

[tmkgm2013]

I have users that I need to block/allow from/to certain websites. Since their devices are DHCP and thier address could change, can I use the FQDN device name in Identity or Access policies?  I am not see this in the user guide as a option.

Thank you for your help

Tom 

[Handy Putra]

You can use the authentication for this and in the policy you can set per user policy.

unless that user machine is not joining/log in to your domain then if yes, using authentication or based on username is not suitable.