Block file-sharing in ms-rdp

maandsEgghead — Thu, 07 May 2020 02:44:00 GMT

Hi Palo Alto community,

Hope all of you are doing well.

May I ask for assistance in blocking file-sharing in ms-rdp? here is the scenario:

1. User is connected to the globalprotect VPN
2. Vpn user uses ms-rdp to remote Virtual PC behind the firewall
3. We are trying to block file sharing over this application(ms-rdp)

we have checked this knowledgebase: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClrGCAS

KB talks about disable file sharing over RDP using GPO

We are still looking for work around in the Palo Alto(maybe there's a feature request here you can inform us)

Thanks

Re: Block file-sharing in ms-rdp

kiwi — Thu, 07 May 2020 13:24:27 GMT

Hi @maandsEgghead

Well no.

Since MS-RDP uses a proprietary encryption method, there's no way to decrypt and inspect the traffic.

As per the article you refer to, disabling file sharing on the end client is the only workaround I can think of.

Cheers,

-Kiwi.

topic Re: Block file-sharing in ms-rdp in General Topics

Block file-sharing in ms-rdp

Re: Block file-sharing in ms-rdp