How to block user agent?

Unanswered Question
Jul 21st, 2011


I would like to block Custom user agents in Ironport Web Security without blocking IE.

User Agents.jpg

How can I do this to:





My WebOS 7.0

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
edadios Thu, 07/21/2011 - 17:59

Hello Wilke,

You can check the access log for the user agents you want to block, and configure for those.

To find user agent:

a) Browser to

GUI -> "System Administration" -> "Log Subscription" -> 'Access logs'

b) Add


in the Custom fields

c) Submit and commit the changes


d) Grep or tail the access logs based on client IP address

e) The user agent string should be located at end of the access log line

Here is a close example, though this is doing authentication bypass:

Then instead of configuring for bypass authentication, configure an access policy that will block all traffic from this identity.

I hope this infomratiom helps you.



Tommy Foucha Mon, 08/01/2011 - 08:43

The problem with your example is the all browsers including IE will present the user agent Mozilla so in essence you would block I.E. as well. Take a look at the site or to find more information. Be careful what you ask for

Chris Illsley Wed, 12/28/2011 - 08:12

Hi Tommy, use two access rules:

1) Useragent IE allow traffic

2) User agent all deny traffic

Hope this helps.


casperinmd Wed, 08/07/2013 - 08:34

I found on some site for Flex Regex to do this to block Android.


Could add the iOS devices in a similar fashion, if you must get more granular, you can, just avoid version numbers as I assume they change often.

Oh the site is here:


Login or Register to take actions

This Discussion

Posted July 21, 2011 at 1:45 PM
Replies:4 Overall Rating:
Views:2662 Votes:0

Related Content