10-05-2011 03:25 PM
There is not built in function within the SA box that will query and return an Operating System value and then let you take actions based on it.
You can use the host check feature in any number of ways to take actions based on an operating system. If you search this forum for "host check mac" for example you will see a lot of threads on it.
You use the features of host check to determine whether or not to let a network object go forward. So you could search for a Windows registry setting or a particular version of Windows (using the host check "Predefined OS Checks") if it fails it does not mean that it is a MAC or is not a Windows PC, it simply means that it did not pass the host check criteria you specified.
The host check tabs "Windows, MAC, ....." simply show you the types of things that can be checked on those platforms - not that the SA box will check the OS platform and then perform that function.
Does that make sense? I hope so.
JNCIS-ENT, FWV, SSL, WLAN
JNCIA-ER, EX, IDP, UAC, WX
Juniper Networks Certified Instructor
Juniper Networks Ambassador
Juniper Elite Reseller
J-Partner Service Specialist - Implementation
If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
10-07-2011 08:57 AM
In addition to Host Checker you can use the user-agent string restriction on the role (Users>User Roles>roleName>General>Restrictions>Browser) or in the role mapping rule to use custom expressions and check on the user-agent here.