Skip to main content
FortiKoala
Staff
Staff
October 1, 2018

Technical Note: Agent Attempts to Download on Android Phones

  • October 1, 2018
  • 0 replies
  • 1087 views
Description
Agent Attempts to Download on Android Phones

Scope
Version:   All
Solution
Version:  All

Issue:  Agent attempts to download on Android phones. 

Upon connecting to the Network Sentry Captive Portal, the host's web browser provides information called the User Agent ID. Network Sentry uses the information in this string for policy determination (such as endpoint compliance).

Chrome for Android has a feature called "Request Desktop Site." With this feature enabled, the User Agent ID is altered and doesn't include the information necessary to identify the device as an Android. Consequently, Network Sentry sees the Android as a different operating system (due to other attributes in the User Agent string) and attempts to push the agent to the device.

The string can be viewed in the apache access_log. Alternatively, if the phone is able to access the internet by other means, the User Agent ID can be identified by browsing to the following URL:
http://whatsmyuseragent.com

String with “Request Desktop Site” box checked (enabled):
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.59 Safari/537.36


Solution:  Disable (uncheck) the “Request Desktop Site” feature via the main menu Chrome App.

String with “Request Desktop Site” box unchecked (disabled):
Mozilla/5.0 (Linux; Android 4.3; Nexus 4 Build/JWR66Y) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.59 Mobile Safari/537.36