Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Given the vulnerabilities in older versions of IE, I want to enforce a rule that only the latest IE or Firefox is used to browse the web. I can't ensure that everyone's PC is up to date, so is there a firewall that will let me write a rule to restrict the version of the browser that can make requests through the firewall? Our current firewall is from Watchguard

share|improve this question
Squid can do it.. but I'm not sure if you mean outbound user traffic, or inbound foreign traffic.. either way, it doesn't sound like the best way to deal with the problem. – Grizly Apr 7 '10 at 7:16
Talk to your Watchguard vendor or Watchguard themselves. The only reason for buying (and ongoing licensing of) Watchguard firewalls is that availability of somebody to talk to. – kaerast Aug 10 '10 at 12:33

As far as I know it not possible for IE to determine exact version of browser and I never seen watchguard, but the main idea is to monitor HTTP requests for User-Agent field and analyse it. But it is always better to monitor your network health and update status with tools like WSUS or NAP

share|improve this answer
agreed, I would prefer to use WSUS, but not all the PCs are on the domain – Eamon Apr 10 '10 at 22:10
It is indeed better to monitor your network health centrally, but blocking old user-agents (and the ability to block user-agents of known malware) is pretty useful. You'll get flack from managers who are suddenly unable to browse the web when you do this, so you'll want to warn people before implementing this in order to cover yourself. – kaerast Aug 10 '10 at 12:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.