https://live.paloaltonetworks.com/t5/next-generation-firewall/restricting-non-work-related-downloads-and-applications/m-p/581729#M2892 <P>We have users that are able to download games from url site not classified as games on their work laptops to their personal folder on the fileserver. Is there anyway to restrict access to .exe file downloads and use without having to have a huge exception lists? I would like to hear various options if you have them</P> Tue, 26 Mar 2024 16:39:41 GMT janelle_provine 2024-03-26T16:39:41Z https://live.paloaltonetworks.com/t5/next-generation-firewall/restricting-non-work-related-downloads-and-applications/m-p/581729#M2892 <P>We have users that are able to download games from url site not classified as games on their work laptops to their personal folder on the fileserver. Is there anyway to restrict access to .exe file downloads and use without having to have a huge exception lists? I would like to hear various options if you have them</P> Tue, 26 Mar 2024 16:39:41 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/restricting-non-work-related-downloads-and-applications/m-p/581729#M2892 janelle_provine 2024-03-26T16:39:41Z https://live.paloaltonetworks.com/t5/next-generation-firewall/restricting-non-work-related-downloads-and-applications/m-p/581846#M2897 <P>applying either of the default file blocking profile to the internet access security rule will block downloading of executables (ssl decryption is required for this to work)</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="reaper_1-1711536141385.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58694i7ED7D4D115324F95/image-size/large?v=v2&amp;px=999" role="button" title="reaper_1-1711536141385.png" alt="reaper_1-1711536141385.png" /></span></P> <P>&nbsp;</P> <P>for any sites where you do need to be able to download executables (windows updates, AV updates, ...) create a rule that allows an application filter set for the "software updates" subcategory</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="reaper_2-1711536332943.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58695iCBE59036B63553ED/image-size/large?v=v2&amp;px=999" role="button" title="reaper_2-1711536332943.png" alt="reaper_2-1711536332943.png" /></span></P> <P>or make a custom URL filtering category containing all the vendors you need downloads from and allow this category in the security rule category (as opposed to in url filtering)</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="reaper_3-1711536454185.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58696i8AB3694ED965582C/image-size/large?v=v2&amp;px=999" role="button" title="reaper_3-1711536454185.png" alt="reaper_3-1711536454185.png" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 27 Mar 2024 10:48:49 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/restricting-non-work-related-downloads-and-applications/m-p/581846#M2897 reaper 2024-03-27T10:48:49Z