I would like to configure a SA to Access only with Iphone/ipad with Junos pulse. ( no web access)
How can I detect that is a Iphone or Ipad ?
How can I blocked web access (only access with Junos Pulse)?
should answer all your questions
the useragent of ipad will have the word "ipad" in there and here is an example of iphone header
Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A538b Safari/419.3
the useragent version isn't a real solution as it can be spoofed easily by most Browsers (also Smartphone / Tabs and so on).
But if you can wait a few weeks Juniper should solve your problems ;-)