topic Re: Can i block file by file name? in General Topics

Can i block file by file name?

Interface — Mon, 26 Aug 2013 05:58:42 GMT

Hi,

so, can i? Eg.: i want to allow upload/download .pdf files, but block "hacker tutorial.pdf" file. How i can do that?

Re: Can i block file by file name?

UhMayYeah — Mon, 26 Aug 2013 06:03:50 GMT

Following article explains a way to achieve this Can Files be Blocked by Name?

Re: Can i block file by file name?

Interface — Mon, 26 Aug 2013 06:15:24 GMT

Sorry, but this document explains nothing for me.. I read it few times before.. Maybe i missing something..

Re: Can i block file by file name?

UhMayYeah — Mon, 26 Aug 2013 06:53:05 GMT

At the moment, there is no direct method to block files using their names .

Following workarounds can be used:

1> Create a Custom URL category using the source URL of the file and block this custom-url category.

Eg : If you know the URLs where this file "hacker tutorial.pdf" could be downloaded from :

Create a custom URL category and block this category using URL filtering profile.

2> Create custom application signature for the URL path including the filename.

P.S: "But please keep in mind that once you block the file by filename your users will normally try to change the filename to bypass the control which makes it useless."

Ref https://live.paloaltonetworks.com/message/10273#10273

Re: Can i block file by file name?

Interface — Mon, 26 Aug 2013 07:28:15 GMT

Thank you for answer. And i understand that users will normally try to change the file name.

Re: Can i block file by file name?

VinceM — Mon, 26 Aug 2013 08:11:55 GMT

Hi,

Correct, paloalto is not a DLP product 🙂

Maybe you can try to:

create URL filtering with "Hacking" for exemple

Block download from these site.

If sites are in https, keep in mind that you can configure SSL decrytion.