topic Re: Blocking all files upload in General Topics

Blocking all files upload

mchartier — Fri, 10 Apr 2020 18:38:21 GMT

Hi,

Anyone has ever figured out how to block any inside hosts to upload any kind of file outside, but still allowing web browsing? The file blocking option support only specific type of files... and the APP-ID database doesn't have any king of basic http or https upload APP-ID.

I know it's not the better protection to configure but I'm trying to block any kind of file that is truing to be uploaded.

Thanks,

Re: Blocking all files upload

rkoenig — Fri, 10 Apr 2020 20:21:29 GMT

Hmmm I thought you could choose ANY in Filetypes, Im assuming that even when you do choose ANY it still doesnt work?

Re: Blocking all files upload

mchartier — Fri, 10 Apr 2020 20:59:11 GMT

Exactly ANY = ANY files in the supported list in file blocking... so not really ANY files type...

So not really scalable.

Re: Blocking all files upload

SutareMayur — Sun, 12 Apr 2020 13:14:37 GMT

@mchartier,

Currently the possible way to configure it is on the basis on APP-IDs like FTP, Dropbox etc instead of file types.

The other workaround will be - Create Custom Signature and limit file size upload. You can keep limit to minimal.

Mayur

Re: Blocking all files upload

rkoenig — Mon, 13 Apr 2020 18:24:03 GMT

We have a similar policy like that, acces to online storage is denied through our default Internet URL policy.
We have another policy that allows access to online storage if you are a member of a specific AD group.
We also have a "read-only" policy that allows everyone access to the approved applications within online storage category and underneath the read-only policy is another policy that denies upload via app ID. I know that theorhetically we do not need the extra policy denying upload but I think it adds an extra layer of security.

Hope that makes sense.

Re: Blocking all files upload

mchartier — Mon, 13 Apr 2020 18:27:53 GMT

The only problem with that is that it can be easily bypassed by using a simple http post on a website that is not categorize like Online storage... but at least it's a start we all do.