How to get iphones / ipad user agent for internet access

[keithsauer507]

Hi.

We recently setup some wireless, and I'm wondering how I can get iphones and ipads connected to the internet without prompting for a username and password. Even if it does prompt and we put in our domain credentials, things don't work.. it's like it heavily restricts access. However if you put DOMAINNAME\ in front of your user name, then it seems to work.

Without making static IP reservations and attaching those ip's to no authentication in IronPort... isn't there a way to assign these devices to a policy via their user agent string? Problem is finding that string amongst different versions of iphones and ipads.

I visited www.ipchicken.com on my iphone and it said Browser: Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_3_2 like Mac OS X; en-us)

AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8H7 Safari/6533.18.5

What part of this do I copy into the user agents field for my no autnentication identity that I'm trying to alter? I tried putting AppleWebKit in, but it still blocks almost everything.

Right now in this Allowed User Agents identiy i have Windows Update checked, as well as these:

(MSOffice\x2014)

Microsoft NCSI

SSLSoapClient

AppleWebKit (does not seem to work)

Thanks for the help!

[keithsauer507]

I think I figured it out.  Followed this closely:

https://ironport.custhelp.com/cgi-bin/ironport.cfg/php/enduser/std_adp.php?p_faqid=1426&p_sid=ODIeCGuk&p_lva=1713&p_li=cF91c2VyaWQ9MXJvblAwcnQmcF9wYXNzd2Q9Zm8wQmE1

Also do you guys know if the custom user agent field can accept wildcards?  Problem is, every version of iOS for iPhone 1, 3G, 3GS, 4, and iPad 1 & 2, or ipod touch (various generations) all have variations in their user strings.  If I could just do a blanket statement for like *iphone* , *ipad*, etc.... that would be easier.

So are there any wildcards or txt masks that can be put in and interpreted in the custom user agents field?

[edadios]

You can use regular expressions.

Please see the "Example User Agent Patterns" on the configuration page. There it uses * . But you will want to limit the number of these you use, so as not to do too much searches for these, and impact performance.

Regards,

Eric