topic Re: How to make white list policy on file blocking palo alto in General Topics

How to make white list policy on file blocking palo alto

Alfiananto — Mon, 26 Jun 2023 04:44:41 GMT

I have Palo Alto PA - 5520 Series

when the user uploads a file, I want palo alto just allow file in jpeg, png, xls, xlsx, pdf type. and blocking other file types.

because my server has an incident, it receive file type phar and php (malicious file) but palo alto didn't block this file because Palo Alto alto didn't have phar file type.

so I want to make white list just for jpeg, png, xls, xlsx, and pdf upload file type.

maybe you can help me.

Re: How to make white list policy on file blocking palo alto

JayGolf — Wed, 28 Jun 2023 06:07:00 GMT

Hi @Alfiananto ,

Navigate to Objects -> Security Profiles -> File Blocking -> Add a profile. In this profile, Specify the extension and MIME type for each file type you wish to be allowed. Ensure that the "Action" for all other file types is set to "Block". Once the custom profile is created, Navigate to "Policies" and select the relevant security policies you wish to enforce your newly created file blocking profile. Hope this helps!

Re: How to make white list policy on file blocking palo alto

Alfiananto — Mon, 29 Apr 2024 09:26:11 GMT

Hai, i'am already tried your advice.

I'm blocking all unwanted extension files, thus allowing wanted extension files. but it can't run properly. but it cannot run properly