Can PAN-OS 9.0 prevent user upload file size?

Reply
Highlighted
L0 Member

Can PAN-OS 9.0 prevent user upload file size?

 

I want to limit the file size user can upload,for example prevent user from upload file larger than 100MB ,Less than 100MB can upload.

 

Tried but failed.
https://live.paloaltonetworks.com/t5/Management-Articles/Limiting-File-Size-Upload-using-Custom-Sign...

 

Not sure if it is a version issue, currently it is PAN OS 9.0 and perform encryption and decryption.Is there any other way?

 

Thank in advance.

Highlighted
L3 Networker

Re: Can PAN-OS 9.0 prevent user upload file size?

Can you confirm that the session is being decrypted? I haven't heard anything about the HTTP decoder changing in 9.0.

Highlighted
L7 Applicator

Re: Can PAN-OS 9.0 prevent user upload file size?

@Houran,

It would be handy to know what application you are trying to limit. The signature that the linked article has you create is the http-req-content-length, which should work for most content as long as you are performing decryption on the traffic. 

There are some situations where you simply won't be able to do this if you allow certain clients to be utilized on the network, Dropbox is a good example of something that uses client certs and you can't decrypt this traffic, and thus this signature would never trigger. 

 

If you feed us what you are trying to limit though, we can verify that this should be working. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!