topic File blocking not happening in General Topics

File blocking not happening

sahithyan.subbu — Fri, 18 Dec 2020 16:55:05 GMT

Hi team,

I have a file blocking profile for upload direction for all type of applications and file types.

I am using Decryption as well, Only in Google Drive File blocking is happening in so weird manner.

Pdf's and jpegs are getting blocking if only they are in less than 1MB, if they are more than 1MB files are getting uploaded.

I see the traffic is http/2 stream also I tested with striping the ALPN, when downgrading to http1.1 , file block happening for all regardless of any file size.

But customer not willing to downgrade and wants to know why it is happening for http/2 .!

Tested in PAN OS 9.0.10 & 9.1.6 with latest content version and also with an old multiple versions, behavior is same.

Any advise .?

Re: File blocking not happening

BPry — Sun, 20 Dec 2020 04:51:03 GMT

@sahithyan.subbu,

What platform are you using? Do you have ECDHE enabled on your decryption profile?

Re: File blocking not happening

sahithyan.subbu — Sun, 20 Dec 2020 05:16:12 GMT

@BPry

Customer is 3020 platform with 9.0.10 OS and I have tested in VM platform with 9.1.6 OS.

Also yes, I have ECDHE enabled in decryption profile.