Forum Discussion

Alfonso_Santia2's avatar
Alfonso_Santia2
Icon for Altostratus rankAltostratus
Jan 17, 2021

Block access to apps by browser. Allow only iPhone or Android accesss

Customer has an application that they want access only through the mobile device app. They have recently found that the application can be accessed through any browser. We have configured the foll...
android
application delivery
iphone
LTM
Alfonso_Santia2's avatar
Alfonso_Santia2
Icon for Altostratus rankAltostratus

Hello Daniel,

 

Thanks for your reply. Will try this out but gave caution to customer as well.

What do you suggest how best to go about this requirement - allow only the access through mobile app (iPhone and Android) ?

jaikumar_f5's avatar
jaikumar_f5
Icon for MVP rankMVP
Jan 20, 2021

I assume even with APM, its still going to check the user-agent variable & thats going to validate against if it contains "iPhone"  or "android" as such. I think WAF would have this advanced detection.

 

But if the requirement is to allow mobile users alone, then the Irule should work. Anyone who knows to tamper the header, can still get the data.

 

Is the application internal or external facing ?