prevent file copy over ssl vpn

[Wadhwani]

Hi all

is there a way to prevent file copy over ssl vpn tunnel. user work from connects via SSL VPN and we want to make they cannot copy file to their personal PC. we have disabled RDP clipboard but thats not enough.

regards

[LukeBullimore]

Hi @Wadhwani

This is possible. You'll want to look into SSL Decryption!

Be advised, the configuration part of decryption can be quite quick - most of the time spent is with preparation, planning and rollout.

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/decryption

https://www.paloaltonetworks.com/features/decryption

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Implement-and-Test-SSL-Decryption...

Thanks,

Luke.

[Wadhwani]

Hi Luke

Thank you for quick reply, can i do SSL Decryption for any ssl vpn or it needs to have palo alto vpn. we are not useing palo alto for any vpn.

[LukeBullimore]

Hi @Wadhwani,

With SSL Decryption enabled, the firewall will decrypt any SSL traffic that passes through it minus the below. As long as your SSLVPN traffic isn't identified as an App-ID or domain from the below article you should be good to go.

https://live.paloaltonetworks.com/t5/Configuration-Articles/List-of-Domains-and-Applications-Exclude...

Thanks,

Luke.

[BPry]

@Wadhwani

Just to verify; you are talking about a user connecting to an SSL VPN (such as GlobalProtect) and being able to identify the traffic that is activly traversing within that VPN?