How to allow or deny Internet access by user agent


Could you prompt how to allow or deny Internet access by user agent?

Like it was in Microsoft TMG2010.

I would like to block access for user agent redoc1001

2017:08:11-16:32:32 sop01 httpproxy[23943]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="POST" srcip="XX.XX.XX.XX" dstip="XX.XX.XX.XX" user="" group="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (WebFilter for SATASRV)" filteraction="REF_HttCffFilteSatasNetwo (Filter Action 07)" size="339" request="0xa3aea00" url="" referer="" error="" authtime="0" dnstime="1" cattime="218" avscantime="3194" fullreqtime="178040" device="0" auth="0" ua="redoc1001" exceptions="" content-type="text/xml" application="soap" app-id="1200" sandbox="-"

thank you


  • Hi Aleksey,

    This is a pending feature request, please cast your vote here.

  • There is complexity to this.  

    I have been collecting unique UA text for awhile, and my list currently has over 1800 entries, including 47 related to Java (UAs of the form JAVA*, JNLP*, jucheck, or jupdate), and over 900 containing MSIE  Some of those, such as Google Toolbar, are products that use MSIE rather than IE itself.  It is much more complicated than saying "block all Firefox".  

    Regular expressions provide the most flexibility for matching, but they also provide the greatest risk of unexpected results.  To ensure the intended coverage, while preventing false positives, someone needs to have visibility into all of the UA text strings that can be expected.   That knowledge seems impossible to obtain.

    Admittedly, you seem to have one of the easiest scenarios, a short string with no special characters, which makes the problem appear simple to implement.