For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Alfonso_Santia2's avatar
Alfonso_Santia2
Icon for Altostratus rankAltostratus
Jan 17, 2021

Block access to apps by browser. Allow only iPhone or Android accesss

Customer has an application that they want access only through the mobile device app. They have recently found that the application can be accessed through any browser. We have configured the foll...
android
application delivery
iphone
LTM
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Jan 19, 2021

Hi Alfonso,

this iRule should work. However I strongly discourage the use of it. User-Agent Headers can be forged easily. Anyone who knows how to access Developer Tools in a browser can change his User-Agent string to whatever they want.

when HTTP_REQUEST {
    if {([string tolower [HTTP::header "User-Agent"]] contains "iphone") || ([string tolower [HTTP::header "User-Agent"]] contains "android") } {
        return
    } else {
        reject
    }
}
Alfonso_Santia2's avatar
Alfonso_Santia2
Icon for Altostratus rankAltostratus
Jan 19, 2021

Hello Daniel,

 

Thanks for your reply. Will try this out but gave caution to customer as well.

What do you suggest how best to go about this requirement - allow only the access through mobile app (iPhone and Android) ?