topic Re: How to block users sending documents to personal mails in General Topics

How to block users sending documents to personal mails

vincythemccian — Tue, 08 Nov 2016 20:32:22 GMT

Hi All,

Please help me to configure a policy or option can be used which will block users to send office documents to their personal mail IDs.

Re: How to block users sending documents to personal mails

BPry — Tue, 08 Nov 2016 21:06:00 GMT

So a few questions would be:

1) Do you want to stop it from your mail server or just from the personal email web portal?

2) What file types are you actually looking to block, as the Palo Alto can't do them all?

What you could do:

1) Setup a File Blocking profile that includes as many of the file types as you can find that actually fits your needs.

2) Set the direction to whatever you actually need, if you just don't want them to 'upload' them then just select that.

3) Set the action to 'block' so that it actually gets stopped.

4) Assign that profile to your rules that allow your users out to these web portals or whatever rules you actually want this to go on.

5) Make sure that you don't include your email server in this rule if your goal is to still allow people to send these types of documents out or recieve them.

If you are looking to stop them from doing this from your email server then the firewall isn't really going to be your friend here; as your company likely has legitimate business reasons to upload and download email attachments. You can likely do this directly through your email server but you would have to tell us if your using exchange or some other email service to actually give you any insight into this.

Re: How to block users sending documents to personal mails

vincythemccian — Tue, 15 Nov 2016 08:25:07 GMT

Dear Bpry,

Thanks for your comments. Have blocked the mails sending to other domain through transport rules in my Office365 messaging server.

Re: How to block users sending documents to personal mails

OtakarKlier — Thu, 17 Nov 2016 22:19:49 GMT

Agreed that using the mail settings is a better way of doing it. I found that if the mail servers talk TLS the file rules wont work :(.