cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1746
Views
0
Helpful
1
Replies

Suspect User Agent Scanning on WSA

cpaquet
Level 1
Level 1

Could you provide me examples of what would be blocked by the 'Suspect User Agent Scanning'?  

Exampes of Suspect User Agents? 

Would that be an unknown browser type, other than Chrome, MS IE, Mozilla FF, etc?

Thanks.

 

1 Accepted Solution

Accepted Solutions

Handy Putra
Cisco Employee
Cisco Employee

WSA maintains a local database for certain bad user agents and will block them automatically

This database will keep getting updates by the normal automatic updates that configured in WSA.

 

Example of bad user agent that will be blocked automatically such as:

FunWebProducts

MyTotalSearch

MSID

iDownloadAgent

nethelper

 

and many more.

 

You can identify the user agent in your accesslogs by adding extra %u in your log subscription of accesslogs

 

Regards

Handy Putra

View solution in original post

1 Reply 1

Handy Putra
Cisco Employee
Cisco Employee

WSA maintains a local database for certain bad user agents and will block them automatically

This database will keep getting updates by the normal automatic updates that configured in WSA.

 

Example of bad user agent that will be blocked automatically such as:

FunWebProducts

MyTotalSearch

MSID

iDownloadAgent

nethelper

 

and many more.

 

You can identify the user agent in your accesslogs by adding extra %u in your log subscription of accesslogs

 

Regards

Handy Putra

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: