blocking traffic with User-Agent header, ie Mobile

[jhickey]

We have a need to block mobile devices from getting to a particular host with active-sync, imap or pop3. From what I have read looking for and blocking traffic based on User-Agent is possible. Anyone ever do this with the PA ?

Thanks,

Justin

[sdurga]

Hi,

Here is a document on how to block the traffic using the user-agent for the mobile devices.

Here are some other related discussions.

In your case you are trying to block IMAP, POP3 traffic. In the above this discussions its all about controlling HTTP traffic. If the mobile devices are using the native email clients then I believe you have to create custom signature that identifies only IMAP/POP3 traffic from the mobile devices (do a packet capture to identify the patters for the mobile IMAP/POP3 traffic).