Blocking by Client OS iPad vs iPhone

  • 2
  • Question
  • Updated 8 months ago
Hello, I see that we can use client OS to reassign profiles, but I am having an issue doing this to differentiate between iPads and iPhones. How can I set up a different profile using the DHCP Option 55 Contents for both iPads and iPhones? Otherwise, is there a way to just block all traffic coming from iPhones?
Photo of Kenta Ito

Kenta Ito

  • 3 Posts
  • 0 Reply Likes

Posted 2 years ago

  • 2
Photo of Jonathan Hurtt

Jonathan Hurtt

  • 98 Posts
  • 48 Reply Likes
Unfortunately, iPads and iPhones (as well as AppleTV) all use the same DHCP signature. There is no way to tell them apart using DHCP Option 55. They are all considered iOS devices. 

The only option would be to use HTTP User agents to identify, but that would require the end user to initiate a HTTPs session in order to tell, which  mean it might not catch all clients and can easily be changed within browser settings. 

Hope that helps.
Photo of Dianne Dunlap

Dianne Dunlap

  • 75 Posts
  • 15 Reply Likes
It looks like ipad and iphone user agents are also the same as reported by content-filter:
Safari Unknown (Mozilla/5.0 (iPad; CPU OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko)
Photo of Jonathan Hurtt

Jonathan Hurtt

  • 98 Posts
  • 48 Reply Likes
Thanks Dianne, must of been a change with one of the most recent iOS upgrades. I knew at one point in the past they were different. 
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
The user agents should be different. That user agent contains "iPad" indicating it's from an iPad and not an iPhone.
Photo of Dianne Dunlap

Dianne Dunlap

  • 75 Posts
  • 15 Reply Likes

Apparently the content-filter is lumping the 2 together though they are different. Here are Safari user agents in current code from a sniff.

Ipad:

Mozilla/5.0 (iPad; CPU OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G35 Safari/601.1

Iphone:

Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13G35 Safari/601.1


This should work if the device presents the Safari user agent when it connects.

But problems I would wonder about is where devices might be using apps which have various non-Safari user agents, apps that can run on both ipad and iphone that would have the same user agent, students bringing in personal ipads that happen to be on the same version as school-owned devices, etc.

Photo of Paul

Paul

  • 14 Posts
  • 0 Reply Likes
Sorry to drag up old thread but is this the same for HiveManager NG?  With Device Classification on HMNG you have the option of MAC OS, iPad, iphone or iOS Device?  So will I be able to separate iPads from BYOD iPhone using this feature? Thanks