topic Re: FileBlocking only one way or ip ? in General Topics

FileBlocking only one way or ip ?

johnny_five — Sat, 24 Feb 2018 00:43:43 GMT

Hi, iam new to the PA product line and trying to figure out stuff in my pa220 before i release them to production.

In one of the scenarios presented; there was a request/question - is it possible to allow users to upload files to a share from one specific ip range and then deny that very ip range to download any type of files from that share ? And users on an other side be able to upload/download files.

Could the solution be some zone creation, 2 different zones and Fileblocking policy and specify direction for each file extension? And is there something thats only supported in larger models like 3020-3050 ?

I provided a scetch to try and explain what iam writing, as sometimes iam not too good at writing down in words waht iam looking to do.

Re: FileBlocking only one way or ip ?

reaper — Mon, 26 Feb 2018 09:50:26 GMT

hi @johnny_five (cool nickname! #5 is alive! )

you may be overhinking it 🙂

just set a different upload and download action in the profile:

Re: FileBlocking only one way or ip ?

johnny_five — Mon, 26 Feb 2018 21:13:37 GMT

Thanks reaper, i was overthinking it. Tested this out and it works perfect, just need to turn on ssl decryption so i can block ALL downloads.

ill mark this as an accepted solution

No disassemble Number Five!