Skip to main content
thrillseeker
thrillseeker
New Member
November 23, 2018
Question

Proxy Policy to filter different User-Agents?

  • November 23, 2018
  • 1 reply
  • 6674 views

Hi all,

 

Is there a way to filter on FGT 5.6.x inside a proxy policy by custom User-Agent?

I know there are some specific proxy-source  objects which can be configured with some User-Agents (e.g. Internet Explorer in drop-down list).

 

In my case I need to filter for a custom User-Agent.

I know it's possible to build customer application signatures but unfortuantely I couldn't find any information on how to build such customer signatures. Is it like SNORT syntax?

 

In the logs I see that FGT recognizes the User-Agent correctly, so probably there should also be a way to use that information for proxy rules?!

 

Thanks for feedback

Cheers Thrillseeker 

    1 reply

    emnoc
    emnoc
    New Member
    November 24, 2018

    I wrote article many years back on my custom  UA signature. For HTTPS website you need decryption in order to use the  signature for the obvious reasons and how much of a DPI  resource  hit for decryption and  UA inspection are ?s that you would need to take into considerations

     

    http://socpuppet.blogspot.com/2014/06/using-fortigate-firewall-to-find-and.html

     

    To answer the 1st part,  I never seen a predefined  UA list  but really haven't  did a lot of  UA filter in a proxy. 

     

    Ken Felix

    Terms & ConditionsAccessibility statement