This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block Firefox

Hi all,

Can you tell me if it is possible, and if so, how to configure Sophos UTM (Version 9.355-1) to block all web requests from the Firefox browser?

Many thanks,

JP



This thread was automatically locked due to age.
Parents
  • What happens if you block the Mozilla application in Application Control?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • What happens if you block the Mozilla application in Application Control?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Hi Bob,

    Thank you for your suggestion. I'm sorry to day that it didn't work though.

    We are looking at Sophos UTM as a possible replacement for our current Microsoft 2010 TMG instance. Within The HTTP filter on TMG 2010 it was possible block content based on signatures within the request header. For example, to block Firefox, TMG 2010 could be configured to identify the Firefox user-agent within the request header and block it if need be.

    This isn't a deal-breaker by any means. I'm just trying to complete a comprehensive comparison between the two products.

    Any further suggestions would be much appreciated.

    Many thanks,

    JP

    2 x SG450 (Version 9.714-4)

    HA = Active-Passive

  • Please note of course that any firewall that blocks based on user agent can easily be bypassed by changing the user agent.  So TMG may be able block FireFox for about 2 minutes, and then it is bypassed.  Therefore I would not consider User Agent blocking to be real security feature.

    Note however that the UTM does support User Agent exceptions.  This is commonly used so that things like Adobe Updates can work bypassing authentication.