Forum Discussion

Bob_H__117248's avatar
Bob_H__117248
Icon for Nimbostratus rankNimbostratus
Apr 19, 2013

SAP Mobile app detection

I added a Client Type to my Access policy and tried a variety of expressions in the branch rules to detect this application. Nothing has worked.

 

expr { [string tolower [mcget {session.user.agent}]] contains "SAP" } - Allow

 

expr { [string tolower [mcget {session.user.agent}]] contains "SAP BusinessObjects Mobile" } - Alow

 

Fallback - Deny

 

 

The Log shows: Recieved User-Agent header: SAP%2520BusinessObjects%2520Mobile%2f4.4.27%20CFNetwork%2f609%20Darwin%2f13.0.0

 

 

Any ideas?

 

 

 

BIG-IP Access Policy Manager (APM)
remote access
security

2 Replies

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Apr 19, 2013
    You're doing a string tolower on the user agent variable, so it'll never equal "SAP".

     

     

    Try "sap".

     

  • Bob_H__117248's avatar
    Bob_H__117248
    Icon for Nimbostratus rankNimbostratus
    Apr 19, 2013

    Thanks!

     

    I changed it to this and it initially appears to be working.

     

    expr { [mcget {session.user.agent}] contains "SAP" }