There may be situations in which you want to deny access to an employee using a device that has an unacceptable profile. For example, follow these configuration steps to deny access to an employee who logs in using a device that is running Google Desktop.
To deny access
Define a device profile with an attribute referencing the Google Desktop application.
Reference the device profile in a Deny zone.
Reference the Deny zone in the community used by your employees.
The appliance determines that the device is running Google Desktop, making it a match for a Deny zone. Deny zones are always evaluated first: if Google Desktop is running, no other zones are evaluated, the access request is denied, and the user is logged out.