Distinguishing between Windows 10 Mobile and Windows 10 desktop universal app?

[brookaveli]

Our policy for Windows 8-10 desktop is to require the full desktop client so that host checker can run. As such, we are actively blocking the universal windows platform app. Unfortunately, this is preventing our users with Windows 10 Mobile from connecting to the VPN. Do you have any technical guidance for configuring the system to bypass the host check on Windows 10 Mobile, while requiring it on Windows 10 desktop?

[brookaveli]

We are currently on ESAP version 3.0.2, if that helps.

[zanyterp]

Do they use different user-agent strings?
You could build a duplicate realm &/or role, depending on what you want to do, that allows Win10 Mobile and one that allows Win10 desktop (and blocks the other that is needed)