Block file-sharing in ms-rdp

[maandsEgghead]

Hi Palo Alto community,

Hope all of you are doing well.

May I ask for assistance in blocking file-sharing in ms-rdp? here is the scenario:

1. User is connected to the globalprotect VPN
2. Vpn user uses ms-rdp to remote Virtual PC behind the firewall
3. We are trying to block file sharing over this application(ms-rdp)

we have checked this knowledgebase: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClrGCAS

KB talks about disable file sharing over RDP using GPO

We are still looking for work around in the Palo Alto(maybe there's a feature request here you can inform us)

Thanks

[kiwi]

Hi @maandsEgghead 

Well no. 

Since MS-RDP uses a proprietary encryption method, there's no way to decrypt and inspect the traffic.

As per the article you refer to, disabling file sharing on the end client is the only workaround I can think of.

Cheers,

-Kiwi.