Hi, There is option to achieve your requirement without HC. We can configure Browser based restriction under Realm level. From the admin GUI, navigate to User Realm > (select the specific user realm) > Authentication Policy > Browser. Choose the option "Only allow users matching the following User-agent policy. Note that some browsers allow users to change this string, so this is not a guaranteed method of identifying the browser type." Configure a Browser restriction with *Windows NT 5.1* and *XP* to be denied so that all the Windows-XP users are denied. Add another rule to allow *. It should be placed below the deny policies so that other operating system users are allowed. This will block browser access by Windows XP users. However, users who change their browser User-Agent string to not include XP and/or NT 5.1 can by-pass this restriction. Regards, VJ
... View more