Context-Aware Access for blocking older Operating Systems

[mw_slocoe]

I have created a CAA rule for blocking older Windows and MacOS from logging into Google Apps. It is currently in Monitor Mode but it seems to block what I want to allow. Do I have it misconfigured or am I reading the log wrong?

Config....

Log....

[Scott]

We are not using OS rules for CAA so this is just a guess from me, but did you deploy the endpoint verification extension or helper to devices?  Also it looks like that rule is going to block mobile and Chromebook access for your accounts...which could be intended, but just in case 😀

[Kim_Nilsson]

Yeah, the Endpoint Verification extension is necessary.

Other than that, the rules look OK, with the caveat that @Scott mentions. 🙂

This is what I have to block old versions of macOS. Sorry about the popor image quality. It wasn't possible to print the entire page to PDF, so I had to take a zoomed out screenshot, and then zoom in again in Paint. 🙂

Oh, I also found this interface, which isn't supposed to be available for Education. I still set them all to Warn. 🙂

https://admin.google.com/ac/context-aware/security-advisor