OS version
Feature availability
Operating Systems | WARP mode required | Zero Trust plans |
---|---|---|
All systems | WARP with Gateway | All plans |
The OS Version device posture attribute checks whether the version of a device’s operating system matches, is greater than or lesser than the configured value.
Enable the OS version check
- In Zero Trust, go to Settings > WARP Client.
- Scroll down to WARP client checks and select Add new.
- Select OS version.
- Configure the Operating system, Operator, and Value fields to specify the OS version you want devices to match.
(Optional) Configure Linux operating system Distro name and Distro revision to specify the version you want devices to match. The distro version always matches with an equal-to operator (==), regardless of the Operator setting.
Select Save.
Next, go to Logs > Posture and verify that the OS version check is returning the expected results.
Determine the OS version
Operating systems display version numbers in different ways. This section covers how to retrieve the version number in each OS, in a format matching what the OS version posture check expects.
On macOS
Open a terminal window.
Use the
defaults
command to check for the value ofSystemVersionStampAsString
.$ defaults read loginwindow SystemVersionStampAsString
On Windows
Open a Powershell window.
Use the
Get-CimInstance
command to get the version property of theWin32_OperatingSystem
class.(Get-CimInstance Win32_OperatingSystem).version
On Linux
OS version
The Linux OS version check returns the system kernel version. For the OS version check to work, the kernel version must be converted to a valid SemVer.
Open a Terminal window.
Run the
uname -r
command to get the complete version.$ uname -rThe valid SemVer would be the first 3 whole numbers of the output you obtain in the previous step. For instance, if the command above returned
5.14.0-25.el9.x86_64
, the valid SemVer would be5.14.0
.
Distro version
The WARP client reads Distro name and Distro revision from the /etc/os-release
file. The name comes from the ID field, and the revision comes from the VERSION_ID field.
To determine the Linux distro version on your device:
Open a Terminal window.
Get the OS identification fields that contain
ID
:$ cat /etc/os-release | grep "ID"If the output of the above command contained
ID=ubuntu
andVERSION_ID=22.04
, Distro name would beubuntu
and Distro revision would be22.04
. The WARP client will check these strings for an exact match.
On ChromeOS
On Chromebooks, the WARP client runs as an Android application inside an Android VM. For the OS version check, WARP version 6.16 and below reports the Android VM version and not the ChromeOS version. Version 6.17 and above returns the actual ChromeOS version.
To determine the ChromeOS version on your device, select the time and go to Settings > About ChromeOS.