block windows 10 from connecting after Windows End of Support?

[travatine]

Is your feature request related to a problem? Please describe. Windows 10 is reaching end of support on approximately 14th October 2025. It would be great if defguard could be configured to block windows 10 ( or older versions) from being able to connect to defguard server.

Describe the solution you'd like The windows version of defguard checks the os level , and if configured on defguard server, tells user to upgrade to windows 11 .

Describe alternatives you've considered Windows group policy can enforce restrictions similar to this, but not when the windows systems are not connected to a domain/ intune.

Additional context This would assist greatly in ensuring users with "byod" comply with corporate policy & ensure the endpoints are of a minimum of level.

[travatine]

To clarify, this would be optional/ opt-in, the default behaviour would be to allow any client os version

[moubctez]

Currently we don't plan such functionality.

[travatine]

Other enterprise VPN offer this function, for example, fortivpn : https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/32970

[teon]

@moubctez I think we need to think about this feature. Related issue https://github.com/DefGuard/client/issues/584