topic blocking traffic with User-Agent header, ie Mobile in General Topics https://live.paloaltonetworks.com/t5/general-topics/blocking-traffic-with-user-agent-header-ie-mobile/m-p/49952#M36764 <HTML><HEAD></HEAD><BODY><P>We have a need to block mobile devices from getting to a particular host with active-sync, imap or pop3. From what I have read looking for and blocking traffic based on User-Agent is possible. Anyone ever do this with the PA ?</P><P>Thanks,</P><P>Justin</P></BODY></HTML> Wed, 26 Sep 2012 14:03:27 GMT jhickey 2012-09-26T14:03:27Z blocking traffic with User-Agent header, ie Mobile https://live.paloaltonetworks.com/t5/general-topics/blocking-traffic-with-user-agent-header-ie-mobile/m-p/49952#M36764 <HTML><HEAD></HEAD><BODY><P>We have a need to block mobile devices from getting to a particular host with active-sync, imap or pop3. From what I have read looking for and blocking traffic based on User-Agent is possible. Anyone ever do this with the PA ?</P><P>Thanks,</P><P>Justin</P></BODY></HTML> Wed, 26 Sep 2012 14:03:27 GMT https://live.paloaltonetworks.com/t5/general-topics/blocking-traffic-with-user-agent-header-ie-mobile/m-p/49952#M36764 jhickey 2012-09-26T14:03:27Z Re: blocking traffic with User-Agent header, ie Mobile https://live.paloaltonetworks.com/t5/general-topics/blocking-traffic-with-user-agent-header-ie-mobile/m-p/49953#M36765 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>Here is a document on how to block the traffic using the user-agent for the mobile devices.</P><P></P><P><A __default_attr="1503" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"></A></P><P></P><P>Here are some other related discussions.</P><P><A __default_attr="16372" __jive_macro_name="message" class="jive_macro jive_macro_message" href="https://live.paloaltonetworks.com/"></A></P><P><A __default_attr="4822" __jive_macro_name="message" class="jive_macro jive_macro_message" href="https://live.paloaltonetworks.com/"></A></P><P></P><P>In your case you are trying to block IMAP, POP3 traffic. In the above this discussions its all about controlling HTTP traffic. If the mobile devices are using the native email clients then I believe you have to create custom signature that identifies only IMAP/POP3 traffic from the mobile devices (do a packet capture to identify the patters for the mobile IMAP/POP3 traffic).</P></BODY></HTML> Wed, 26 Sep 2012 17:01:38 GMT https://live.paloaltonetworks.com/t5/general-topics/blocking-traffic-with-user-agent-header-ie-mobile/m-p/49953#M36765 sdurga 2012-09-26T17:01:38Z