topic Re: Clarification on File Blocking and SSL in General Topics

Clarification on File Blocking and SSL

camkim_MDEA — Wed, 28 Dec 2011 19:08:59 GMT

If a download service uses SSL and PAN has an App and file blocking capability, but under SSL Decryption, it is an exception (ala drobpox), are options are pretty limited, correct?

Re: Clarification on File Blocking and SSL

rmonvon — Wed, 28 Dec 2011 19:45:03 GMT

By default, we cannot inspect the contents inside of SSL and the file blocking feature will not apply since the traffic is encrypted. You can enable SSL Decryption whereby the PA device will participate in the SSL process and be able to inspect the SSL contents. File blocking, threat scanning, data filtering, etc will apply once the traffic has been decrypted.

Thanks.

Re: Clarification on File Blocking and SSL

camkim_MDEA — Wed, 28 Dec 2011 22:09:34 GMT

So File-blocking is effective under the following conditions:

1) Is identified as an App

2) has file-blocking feature

3) If SSL is used, and is not on the following list https://live.paloaltonetworks.com/docs/DOC-1423.

Just want to get a very clear understanding before allowing download from specific services.

Re: Clarification on File Blocking and SSL

bpappas — Fri, 30 Dec 2011 23:01:55 GMT

@camkim_MDEA:

yes. that looks like a valid way to evaluate this feature and when it is applicable.

-Benjamin