Configuring a profile to allow or block endpoint from VPN tunnel connection based on the applied sec

[bfig90]

Dear,

Following the guide (https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/701440/configuring-a-p... i'm trying to create rules in order to block for i.e:endpoint with critical vulnerabilities to connect vpn.

But in my console i do not have the option like showing in the link:

Link console:

My console:

[johnathan]

That document references a 'security posture tag', which needs to be configured first before it is selected. You can make it by following this guide: 
https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/142/adding-a-security-...

[bfig90]

I understand. I followed the link and i learned that i can create 2-3 ore more rules in one. But still i cannot find how to apply this rule in order to say that if EndpointXY is not fulfilling this conditions do not connect 

[johnathan]

I would rewrite the rule to only apply the tag to the client if they are meeting your requirements. You can then only allow the user to connect if that tag is there. 

[bfig90 · Accepted solution]

I found it. In the new console version 7.4.0 the option is this one, after you have created the rule logic: