FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
FortiKoala
Staff
Staff
Article Id 192444
Description
Agent Attempts to Download on Android Phones

Scope
Version:   All
Solution
Version:  All

Issue:  Agent attempts to download on Android phones. 

Upon connecting to the Network Sentry Captive Portal, the host's web browser provides information called the User Agent ID. Network Sentry uses the information in this string for policy determination (such as endpoint compliance).

Chrome for Android has a feature called "Request Desktop Site." With this feature enabled, the User Agent ID is altered and doesn't include the information necessary to identify the device as an Android. Consequently, Network Sentry sees the Android as a different operating system (due to other attributes in the User Agent string) and attempts to push the agent to the device.

The string can be viewed in the apache access_log. Alternatively, if the phone is able to access the internet by other means, the User Agent ID can be identified by browsing to the following URL:
http://whatsmyuseragent.com

String with “Request Desktop Site” box checked (enabled):
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.59 Safari/537.36


Solution:  Disable (uncheck) the “Request Desktop Site” feature via the main menu Chrome App.

String with “Request Desktop Site” box unchecked (disabled):
Mozilla/5.0 (Linux; Android 4.3; Nexus 4 Build/JWR66Y) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.59 Mobile Safari/537.36

Contributors