Locking Out Unregistered Devices

You can use a deny zone to lock out a particular device. To do this, create a device profile that contains an Equipment ID attribute and select the Does not match check box when adding the Device Identifier. This feature allows you to lock out, for example, a device that you suspect has been compromised, while not completely locking out the user who owns that device. The device information is collected from the login attempt.