Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
01-19-2016 08:53 AM
I am currently researching a way to be able to intercept traffic from an unsupported IE browser and then be able to feed that information about the host, mainly FQDN hostname or IP address of the host into the PAN dynamically based on the user-agent:
IE8 - Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
IE9 - Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
IE 10 - Mozilla/5.0 (compatible; WOW64; MSIE 10.0; Windows NT 6.2)
One way I am thinking of doing this, is to have a tcpdump stream pick up the traffic between the internal host and the PAN before it gets out to the Internet. The PCAP would then have the information I am looking for. I am thinking that I can grep the info I need and build a list that can update a dynamic block list.
Has anyone been able to accomplish this?
Scott
