topic Re: Allow download no upload in Next-Generation Firewall Discussions

Allow download no upload

kushkussa — Wed, 18 Dec 2024 07:41:20 GMT

Can some one help me on below requirement.

Need to allow users to download only of files from online-storage and backup Category and we should restrict upload.

thanks

Re: Allow download no upload

Edsnow — Wed, 18 Dec 2024 09:36:12 GMT

you can create a security policy with online-storage and backup URL category as matching criteria then add a file blocking profile application and file type as any then select the direction as upload and action will be blocked.

This way you can restrict your users to block upload files to the online-storage and backup category.

Re: Allow download no upload

kushkussa — Wed, 18 Dec 2024 09:43:58 GMT

Thanks for responding in security rule action should be allow or deny?

Re: Allow download no upload

kushkussa — Wed, 18 Dec 2024 10:32:34 GMT

Also I have implemented the solution you mentioned and still no luck

Re: Allow download no upload

VinceM — Thu, 19 Dec 2024 07:14:32 GMT

Hi all,

Answer is correct with the File blocking profile. Keep in mind that if you want to be able to manage files, you have to see files. Then decryption is the key. In parallel you have to block quic app for forcing TLS traffic to stay on TCP.

Rgds

Re: Allow download no upload

SA.Kushal — Thu, 19 Dec 2024 07:57:53 GMT

Thanks for responding

I have already had decryption in place my traffic is decrypted still File blocking is not working.

Decryption Rule: Source test machine, destination Any Traffic action decrypted

Security Rule: Source test machine, Destination-->Any, Service--->Any, In profile called file blocking.

Still NO luck file upload is not getting blocked.

Re: Allow download no upload

SA.Kushal — Thu, 19 Dec 2024 08:29:28 GMT

Also I have blocked the quic App still no luck

Re: Allow download no upload

Edsnow — Wed, 15 Jan 2025 08:43:23 GMT

Have you confirmed your traffic is being matching from the respective rule, Also Please verify your traffic is decrypted as enable decrypted column in the traffic logs.