User Agent report?

[nickcx1]

Hi,

PanOS 4.1.14. Is it possible to report on user agent connecting via my 2020? To be able to report on Firefox, Chrome or IE versions for example would be useful .

Further still..(and I doubt this..) to instigate a policy based on a user agent?

Thanks all

Nick

[knarra1]

I believe you are looking to identify the traffic and define the policies action based on the browser the traffic initiated from the client . If it is the case, you can do that by creating a custom application to identify the browser and can define the actions . For the custom application you will need to create a signature to look at the user agent strings in the http headers and detect the browser type http://www.useragentstring.com/pages/All/  contains  list of User agent strings for your reference. https://live.paloaltonetworks.com/docs/DOC-5028  & https://live.paloaltonetworks.com/docs/DOC-1247 has configuration steps on how to detect the firefox & chrome browsers and block the traffic

[nickcx1]

Thank you for the reply - that will be very useful. I take it that that only way to passively report on useragents would be to then add the custom applications to my standard web access policy? Or is there a better way to get that information?

Thanks again

[knarra1]

Yes , you will need to define custom applicationsto identify the browser and add them to the security policies