How to block user agent?

Unanswered Question
Jul 21st, 2011

Hi!

I would like to block Custom user agents in Ironport Web Security without blocking IE.

User Agents.jpg

How can I do this to:

Chrome,

Safari,

Firefox,

Opera,

My WebOS 7.0

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
edadios Thu, 07/21/2011 - 17:59

Hello Wilke,

You can check the access log for the user agents you want to block, and configure for those.

To find user agent:

a) Browser to

GUI -> "System Administration" -> "Log Subscription" -> 'Access logs'

b) Add

%u

in the Custom fields

c) Submit and commit the changes

Then

d) Grep or tail the access logs based on client IP address

e) The user agent string should be located at end of the access log line

Here is a close example, though this is doing authentication bypass:

http://tinyurl.com/m5kf9c

Then instead of configuring for bypass authentication, configure an access policy that will block all traffic from this identity.

I hope this infomratiom helps you.

Regards,

Eric

mooncat76 Wed, 12/28/2011 - 08:12

Hi Tommy, use two access rules:

1) Useragent IE allow traffic

2) User agent all deny traffic

Hope this helps.

Chris

Actions

Login or Register to take actions

This Discussion

Posted July 21, 2011 at 1:45 PM
Stats:
Replies:4 Avg. Rating:
Views:2139 Votes:0
Shares:0

Related Content

Discussions Leaderboard

Rank Username Points
1 387
2 98
3 91
4 25
5 24
Rank Username Points
5
5