Cisco WSA ID Profile Custom User Agent

[Mandeep singh5]

Hello Community,

I'm looking for a document in which all regular expressions have been given for mobile phones.

I'm implementing a Cisco WSA in which I need to allow the iPhone, iPad, iPod, blackberry, android and Windows mobile in identification profiles under custom user agents.

If anyone has any document containing all the regex entries for mobile phones, kindly share or guide me on how I can configure this.

@WSA 

[fw_mon · Accepted solution]

Hello @Mandeep singh5 

here is a list of regexes to detect mobile browsers:

1. Android Mobile: Android.*Mobile
2. iPhone: (iPhone|iPod)
3. iPad: iPad
4. Windows Phone: (Windows\sPhone|IEMobile)
5. BlackBerry: (BlackBerry|\bBB10\b|rim\sTablet\sOS)
6. Windows Mobile: (Windows\sCE|Windows\sPhone\s(?:OS\s)?[\d.]+|Windows\sMobile)
7. Firefox Mobile: (Mobile.*Firefox|Firefox.*Mobile)
8. Samsung Internet: SamsungBrowser

You can find many ressources on the Internet with a User-Agent strings.

But as you may be already know, the User-Agent string is just another HTTP header and is very easy to fake. Any modern browser has an option to fake the UA string. Even if this option is blocked by admin there are many ways to curcumvent this restriction. As MDN put it: When considering using the user agent string to detect which browser is being used, your first step is to try to avoid it if possible.

You can use ISE or network ID of a WLAN network for more reliable detection. It is OK to use UA for logging but a bad practice to use it for building a security policy on WSA.

[Mandeep singh5]

Can you also tell me the regular expression of the Microsoft Edge browser containing specific versions and for all versions as well!!

Thanks for your previous reply!!