https://live.paloaltonetworks.com/t5/general-topics/file-blocking/m-p/514963#M106868 <P>Hi all,</P> <P>&nbsp;</P> <P>I have successfully implemented and tested file blocking on some some sites, however for mega.nz the firewall is not blocking the files. Looking at the decryption logs i suspect that there is traffic that is not being decrypted since the root status states uninspected.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="GnContente_0-1663247974882.png" style="width: 986px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43871iE87E60EE8D271753/image-dimensions/986x117/is-moderation-mode/true?v=v2" width="986" height="117" role="button" title="GnContente_0-1663247974882.png" alt="GnContente_0-1663247974882.png" /></span></P> <P>looking deeper into the log i believe the firewall has no certificate info from the server</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="GnContente_1-1663248169864.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43872iAD972115C192E7CD/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="GnContente_1-1663248169864.png" alt="GnContente_1-1663248169864.png" /></span></P> <P>&nbsp;</P> <P>Is there&nbsp; a way to make this work?</P> <P>&nbsp;</P> <P>TIA</P> <P>&nbsp;</P> Thu, 15 Sep 2022 13:43:15 GMT GnContente 2022-09-15T13:43:15Z https://live.paloaltonetworks.com/t5/general-topics/file-blocking/m-p/514963#M106868 <P>Hi all,</P> <P>&nbsp;</P> <P>I have successfully implemented and tested file blocking on some some sites, however for mega.nz the firewall is not blocking the files. Looking at the decryption logs i suspect that there is traffic that is not being decrypted since the root status states uninspected.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="GnContente_0-1663247974882.png" style="width: 986px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43871iE87E60EE8D271753/image-dimensions/986x117/is-moderation-mode/true?v=v2" width="986" height="117" role="button" title="GnContente_0-1663247974882.png" alt="GnContente_0-1663247974882.png" /></span></P> <P>looking deeper into the log i believe the firewall has no certificate info from the server</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="GnContente_1-1663248169864.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43872iAD972115C192E7CD/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="GnContente_1-1663248169864.png" alt="GnContente_1-1663248169864.png" /></span></P> <P>&nbsp;</P> <P>Is there&nbsp; a way to make this work?</P> <P>&nbsp;</P> <P>TIA</P> <P>&nbsp;</P> Thu, 15 Sep 2022 13:43:15 GMT https://live.paloaltonetworks.com/t5/general-topics/file-blocking/m-p/514963#M106868 GnContente 2022-09-15T13:43:15Z https://live.paloaltonetworks.com/t5/general-topics/file-blocking/m-p/515055#M106878 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/200040">@GnContente</a>&nbsp;,</P> <P>&nbsp;</P> <P>Features like f<SPAN>ile blocking, threat scanning, data filtering, etc will apply once the traffic has been decrypted. If SSL decryption is not setup, the firewall wont be able to inspect the SSL traffic. I would double check the decryption policy you have setup and verify decryption is working properly.&nbsp;</SPAN></P> Fri, 16 Sep 2022 06:45:48 GMT https://live.paloaltonetworks.com/t5/general-topics/file-blocking/m-p/515055#M106878 JayGolf 2022-09-16T06:45:48Z