07-21-2011 01:45 PM
Hi!
I would like to block Custom user agents in Ironport Web Security without blocking IE.
How can I do this to:
Chrome,
Safari,
Firefox,
Opera,
My WebOS 7.0
07-21-2011 05:59 PM
Hello Wilke,
You can check the access log for the user agents you want to block, and configure for those.
To find user agent:
a) Browser to
GUI -> "System Administration" -> "Log Subscription" -> 'Access logs'
b) Add
%u
in the Custom fields
c) Submit and commit the changes
Then
d) Grep or tail the access logs based on client IP address
e) The user agent string should be located at end of the access log line
Here is a close example, though this is doing authentication bypass:
Then instead of configuring for bypass authentication, configure an access policy that will block all traffic from this identity.
I hope this infomratiom helps you.
Regards,
Eric
08-01-2011 08:43 AM
The problem with your example is the all browsers including IE will present the user agent Mozilla so in essence you would block I.E. as well. Take a look at the site http://www.useragentstring.com/ or http://www.user-agents.org/index.shtml to find more information. Be careful what you ask for
12-28-2011 08:12 AM
Hi Tommy, use two access rules:
1) Useragent IE allow traffic
2) User agent all deny traffic
Hope this helps.
Chris
08-07-2013 08:34 AM
I found on some site for Flex Regex to do this to block Android.
(\w*)Android(\w*)
Could add the iOS devices in a similar fashion, if you must get more granular, you can, just avoid version numbers as I assume they change often.
Oh the site is here: http://www.stratulat.com/Regular_Expressions_Flex.html
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: