But how exactly can you pull a website off, i mean it is a web site..
In a more non-corporate environment this would be the beginning of an arms race to try to figure out how to fiddle with headers to either block or not block the device, but since we're discussing corporate behemoths with legal teams larger than most companies, it'll stop here, because no legal team would sign off on the idea of fraudulently identifying yourself in a header in order to obtain services from a hostile competitor.