Host Checker with iPad and iPhone

[kalluga_]

I have a role which allows vpn tunneling (netconnect/pulse) I would like only iPad and iPhone users to recieve this role. Is there a common app or process on the iPad and iPhone that host checker can look for?

[jayLaiz_]

Hi,

we can only check if the IOS device is

1. jail broken and block jail broken devices

2. whether the mobile security suite (MSS) is instaled

3. OS check to check for IOS version on Client

Regards,

Jay

[muttbarker_]

You could also do a browser string check.

[zanyterp_]

In addition to the user agent string check (*junospulse*iphone and *junospulse*ipad*, iirc), you can do host checker on the realm and use custom expressions so that if the client passes any non-iOS checks it fails to login as there will be no valid role mapping rule

[zanyterp_]

Or apply the enforcement in the role so that if those policies don't match, the role can't be assigned