topic Re: Block Mobile Devices in General Topics

Block Mobile Devices

rob.burgoyne — Tue, 12 Jun 2012 19:04:39 GMT

I was wondering if anyone has created a custom app-id to identify mobile devices to create policies around. For example block all mobile devices getting to the internet, or apply a QoS policy ect.

Thanks,

Re: Block Mobile Devices

mikand — Wed, 13 Jun 2012 06:40:49 GMT

I dont think there is any reliable way to do this.

You could watch for "user-agent" string (which the mobile device owner can change) and tcp windowssizes being used (which can also be changed).

One way is to do the other way around - use globalprotect to identify which box is which and based on this information (like a whitelist) you can QoS those into a higher prio. Or captive portal (but this wouldnt stop mobile devices).

Another way could be if you have an AD and configure userid to only allow the specific AD-group containing your approved devices (based on machine accounts).

Re: Block Mobile Devices

rmonvon — Thu, 14 Jun 2012 02:44:04 GMT

To add on to mikand's suggestion, check out this post on detecting iPhone/iPad: https://live.paloaltonetworks.com/docs/DOC-1503. Thanks.