Forum Discussion
How to restrict Unsupported browser
Oktay Sari Hi thank you so much for your response. What we are looking any mobile device using an Unsupported version of the browser on a mobile device their access should not allow
Hi Anandkumar you're welcome. There are a couple of options (not many) but the outcome depends on the device state. Some options will only work if the device is managed with Intune, others will also work for unmanaged devices. What is your scenario like?
Managed devices:
- Like NielsScheffers mentioned, you can either use compliance policies for iOS or for Android devices by assigning the app as Uninstall.
- https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-approved-client-app
- Like I mentioned before, with an App protection Policies
- https://docs.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps (requires extra licensing)
Unmanaged devices:
- MAM Policies (App protection Policy)
- https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-approved-client-app
Please note: The CA with require approved client app requires devices to be registered with AAD and a broker app. Furthermore, this method not only blocks unsupported browsers, but any app that is not on the approved apps list!
You can also configure the CA to require approved apps, AND/OR app protection policy. See https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-policy-approved-app-or-app-protection for more info on that.
Hope this helps.