I would like to configure a SA to Access only with Iphone/ipad with Junos pulse. ( no web access)
How can I detect that is a Iphone or Ipad ?
How can I blocked web access (only access with Junos Pulse)?
the useragent of ipad will have the word "ipad" in there and here is an example of iphone header
Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A538b Safari/419.3
the useragent version isn't a real solution as it can be spoofed easily by most Browsers (also Smartphone / Tabs and so on).
But if you can wait a few weeks Juniper should solve your problems ;-)