Security policy for hosts

Is there any way to create a policy so hosts that are not in compliance cannot access the internal network?

Example: If the host does not have AV and CrowdStrike installed and active, access to the internal network or VPN is not allowed, therefore, the firewall blocks authentication and traffic.
Something similar to the host information profile (HIP) from GlobalProtection (Palo Alto).

Added TAGs
[edited by: Erick Jan at 11:59 PM (GMT -7) on 3 Oct 2023]