topic Blocking access to Consumer gmail accounts, but allow Google Apps in General Topics

Blocking access to Consumer gmail accounts, but allow Google Apps

brucegarlock — Mon, 16 May 2016 21:45:27 GMT

According to Google, the only way to block access to consumer gmail accounts, is to intercept the traffic, and insert a HTTP header for all traffic going to google.com. Obviously PAN-OS can perform SSL inspection, but can it do the HTTP header insertion?

Here's Google's page on this: https://support.google.com/a/answer/1668854?hl=en

Re: Blocking access to Consumer gmail accounts, but allow Google Apps

reaper — Tue, 17 May 2016 08:16:39 GMT

Hi Bruce

you can't inject things into the header of http sessions, but you can perform SSL decryption, inspect applications inside and block gmail by application

Re: Blocking access to Consumer gmail accounts, but allow Google Apps

tsrivastav — Tue, 17 May 2016 15:46:43 GMT

Even we have a app-id for the same but the application depends on ssl also.

Hence we require an ssl decryption ( either for custom category or for web-based email ) to make it work properly

you can also block attachment through the same if needed when ssl decrytpion in place

Re: Blocking access to Consumer gmail accounts, but allow Google Apps

Benson.lee — Tue, 20 Mar 2018 06:45:08 GMT

https://www.paloaltonetworks.com/documentation/81/pan-os/pan-os/app-id/http-header-insertion/http-header-insertion-understand-custom-headers Os 8.1 Support ?