Can PAN-OS 9.0 prevent user upload file size?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Can PAN-OS 9.0 prevent user upload file size?

L0 Member

 

I want to limit the file size user can upload,for example prevent user from upload file larger than 100MB ,Less than 100MB can upload.

 

Tried but failed.
https://live.paloaltonetworks.com/t5/Management-Articles/Limiting-File-Size-Upload-using-Custom-Sign...

 

Not sure if it is a version issue, currently it is PAN OS 9.0 and perform encryption and decryption.Is there any other way?

 

Thank in advance.

2 REPLIES 2

L3 Networker

Can you confirm that the session is being decrypted? I haven't heard anything about the HTTP decoder changing in 9.0.

Cyber Elite
Cyber Elite

@Houran,

It would be handy to know what application you are trying to limit. The signature that the linked article has you create is the http-req-content-length, which should work for most content as long as you are performing decryption on the traffic. 

There are some situations where you simply won't be able to do this if you allow certain clients to be utilized on the network, Dropbox is a good example of something that uses client certs and you can't decrypt this traffic, and thus this signature would never trigger. 

 

If you feed us what you are trying to limit though, we can verify that this should be working. 

  • 2178 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!