topic Re: User Agent report? in General Topics

User Agent report?

nickcx1 — Tue, 22 Oct 2013 14:51:02 GMT

Hi,

PanOS 4.1.14. Is it possible to report on user agent connecting via my 2020? To be able to report on Firefox, Chrome or IE versions for example would be useful .

Further still..(and I doubt this..) to instigate a policy based on a user agent?

Thanks all

Nick

Re: User Agent report?

knarra1 — Tue, 22 Oct 2013 17:03:06 GMT

I believe you are looking to identify the traffic and define the policies action based on the browser the traffic initiated from the client . If it is the case, you can do that by creating a custom application to identify the browser and can define the actions . For the custom application you will need to create a signature to look at the user agent strings in the http headers and detect the browser type http://www.useragentstring.com/pages/All/ contains list of User agent strings for your reference. https://live.paloaltonetworks.com/docs/DOC-5028 & https://live.paloaltonetworks.com/docs/DOC-1247 has configuration steps on how to detect the firefox & chrome browsers and block the traffic

Re: User Agent report?

nickcx1 — Wed, 23 Oct 2013 10:39:33 GMT

Thank you for the reply - that will be very useful. I take it that that only way to passively report on useragents would be to then add the custom applications to my standard web access policy? Or is there a better way to get that information?

Thanks again

Re: User Agent report?

knarra1 — Sat, 26 Oct 2013 00:30:26 GMT

Yes , you will need to define custom applicationsto identify the browser and add them to the security policies