Source OS - Android
Is it possible to Filter for an Android device using the "Source OS" in the
Advanced Options of a Firewall rule?
If it's not in the list already, then no. The fingerprint database comes from FreeBSD: https://github.com/pfsense/FreeBSD-src/blob/189c0a627f96bee933ebb1b814aa1bd5da34a513/sbin/pfctl/pf.os
It's quite old, and it's unclear if/when it would be updated upstream.
Thanks jimp. was just looking for additional firewall protection for a legacy bespoke FTP device.
I'll see what I can do with Suricata rules.