topic unable to block downloads Command-Line Download Accelerator in General Topics

unable to block downloads Command-Line Download Accelerator

upelister — Thu, 03 Feb 2022 19:51:45 GMT

Hello,

I created a file download profile which allows only download rpm,bzip2,gzip and blocked rest. When I use wget iso file download blocked. When I use "axel" iso file download not blocked. What is the difference and how can I completely restrict download.

Thanks.

"Axel, a Command-Line Download Accelerator for Linux"

Tested on PanOS-9.1

Used Centos,

İssued commands,

wget --no-check-certificate target=_blankhttps://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-desktop-amd64.iso

axel --alternate target=_blankhttps://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-desktop-amd64.iso

Re: unable to block downloads Command-Line Download Accelerator

OtakarKlier — Thu, 03 Feb 2022 20:57:24 GMT

Hello,

I would start by checking the logs to see how the PAN identified the traffic when issuing the axel command. Then from there see if I can block the URL's/Application, etc.

Regards,

Re: unable to block downloads Command-Line Download Accelerator

upelister — Thu, 03 Feb 2022 21:11:13 GMT

Traffic identified as web-browsing. I think Somehow axel acting like browsing file.

Thank you for reply.

Re: unable to block downloads Command-Line Download Accelerator

OtakarKlier — Thu, 03 Feb 2022 21:34:59 GMT

Hello,

I'm guessing you already have the application type set to 'any'?

Regards,

Re: unable to block downloads Command-Line Download Accelerator

upelister — Fri, 04 Feb 2022 05:20:24 GMT

Policy structure,

Security Policy;

Allowed applications;

dnf,ssl,web-browsing,yum

Allowed services,

tcp 443

tcp 80

Allowed URL categories in security Rule URL Category Match Field

Computer-internet-info

web-hosting

Profile;

IPS, Antispyware,URL, File Blocking Profiles are set

Decrytipn Policy;

All trafic are decrypted.

Re: unable to block downloads Command-Line Download Accelerator

OtakarKlier — Fri, 04 Feb 2022 22:44:52 GMT

Hello,

I would be interested in what support would say about this.

Regards,

Re: unable to block downloads Command-Line Download Accelerator

upelister — Fri, 08 Apr 2022 07:10:27 GMT

Hello,

TAC response is; in 10.x OS file blocking works but 9.1 OS allowing download. I do not have 10.x right now so i could not test.