topic Re: Best practice to unblock NUPKG in Next-Generation Firewall Discussions

Best practice to unblock NUPKG

andrewNTGIT — Tue, 13 Sep 2022 13:52:51 GMT

Looking for suggestions to unblock NUPKG files, as it is not a populated file (I already tried whitelisting the url it originates from):

File Transfer Blocked

The file you are trying to download or upload has been blocked in accordance with company policy. Please contact your system administrator if you believe this is an error.

File name: Teams.nuspec

Re: Best practice to unblock NUPKG

Adrian_Jensen — Tue, 13 Sep 2022 23:09:03 GMT

What file filters are you applying to Security Policies? The built in filters or your own custom filters? And what file types is it blocking?

Policies -> Security -> [security rule] -> Actions -> Profile Setting -> File Blocking=[filter]

Objects -> Security Profile -> File Blocking -> [filter]

I don't see any file type for .nupkg either, though apparently it is a Visual Studio distribution package that is zip file with custom formatting. I would guess it is therefore detected as a zip or Multi-Level-Encoding file. What does the PA log say it blocked the file as?

Monitor -> Logs -> Data Filtering

Could you add a custom file filter with a "continue" action for that particular type?

Re: Best practice to unblock NUPKG

andrewNTGIT — Tue, 20 Sep 2022 17:42:53 GMT

It ended up being a 7z that was being blocked according to the logs. So we unblocked 7z for that group.