topic Re: how to block internet download manager in General Topics

how to block internet download manager

vongsackda — Fri, 02 Feb 2018 04:21:35 GMT

hi everyon

can palo alto block internet download manager?

if can, then how to block

Re: how to block internet download manager

kiwi — Fri, 02 Feb 2018 09:03:30 GMT

Hi @vongsackda,

How about this :

>  configure
#  set deviceconfig setting ctd skip-block-http-range no
#  commit

When skip-block-http-range is set to no, any time the Palo Alto Networks firewall sees an HTTP client request for a file with a range request in the header (for example, when resuming a file download), the firewall intercepts it and mimics a server rejecting the range request feature. This tells the client to start from the beginning of the file.

Note: This is global feature to turn on and off which can impact legitimate applications.

Also explained in this article : How-to-Block-Multi-thread-HTTP-Downloads

Cheers !

-Kiwi.

Re: how to block internet download manager

vongsackda — Thu, 12 Jul 2018 03:23:33 GMT

this solution it not solve

Re: how to block internet download manager

kiwi — Fri, 13 Jul 2018 07:57:33 GMT

Hi @vongsackda,

It's been 5 months since the last reply on this 🙂

We'll need a little more info than that to work with.

Can you add some more details ?

Note : I've noticed that the proposed CLI from the previous comment isn't available on all platforms.

For example :

This command isn't available on a PA-200 running PAN-OS 8.1.1

This command IS available on a PA-5220 running PAN-OS 8.0.8

Cheers,

-Kiwi.