topic prevent file copy over ssl vpn in General Topics

prevent file copy over ssl vpn

Wadhwani — Mon, 30 Jul 2018 15:47:38 GMT

Hi all

is there a way to prevent file copy over ssl vpn tunnel. user work from connects via SSL VPN and we want to make they cannot copy file to their personal PC. we have disabled RDP clipboard but thats not enough.

regards

Re: prevent file copy over ssl vpn

LukeBullimore — Mon, 30 Jul 2018 15:56:10 GMT

Hi @Wadhwani

This is possible. You'll want to look into SSL Decryption!

Be advised, the configuration part of decryption can be quite quick - most of the time spent is with preparation, planning and rollout.

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/decryption

https://www.paloaltonetworks.com/features/decryption

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Implement-and-Test-SSL-Decryption/ta-p/59719

Thanks,

Luke.

Re: prevent file copy over ssl vpn

Wadhwani — Mon, 30 Jul 2018 16:15:22 GMT

Hi Luke

Thank you for quick reply, can i do SSL Decryption for any ssl vpn or it needs to have palo alto vpn. we are not useing palo alto for any vpn.

Re: prevent file copy over ssl vpn

LukeBullimore — Mon, 30 Jul 2018 16:40:02 GMT

Hi @Wadhwani,

With SSL Decryption enabled, the firewall will decrypt any SSL traffic that passes through it minus the below. As long as your SSLVPN traffic isn't identified as an App-ID or domain from the below article you should be good to go.

https://live.paloaltonetworks.com/t5/Configuration-Articles/List-of-Domains-and-Applications-Excluded-from-SSL-Decryption/ta-p/62201

Thanks,

Luke.

Re: prevent file copy over ssl vpn

BPry — Mon, 30 Jul 2018 21:31:03 GMT

@Wadhwani

Just to verify; you are talking about a user connecting to an SSL VPN (such as GlobalProtect) and being able to identify the traffic that is activly traversing within that VPN?