Blocking all files upload

[mchartier]

Hi, 

Anyone has ever figured out how to block any inside hosts to upload any kind of file outside, but still allowing web browsing? The file blocking option support only specific type of files... and the APP-ID database doesn't have any king of basic http or https upload APP-ID.

I know it's not the better protection to configure but I'm trying to block any kind of file that is truing to be uploaded.

Thanks, 

[rkoenig]

Hmmm I thought you could choose ANY in Filetypes, Im assuming that even when you do choose ANY it still doesnt work? 

[mchartier]

Exactly ANY = ANY files in the supported list in file blocking... so not really ANY files type...

So not really scalable.

[SutareMayur]

@mchartier,

Currently the possible way to configure it is on the basis on APP-IDs like FTP, Dropbox etc instead of file types.

The other workaround will be - Create Custom Signature and limit file size upload. You can keep limit to minimal.

Mayur

[rkoenig]

We have a similar policy like that, acces to online storage is denied through our default Internet URL policy.
We have another policy that allows access to online storage if you are a member of a specific AD group.
We also have a "read-only" policy that allows everyone access to the approved applications within online storage category and underneath the read-only policy is another policy that denies upload via app ID. I know that theorhetically we do not need the extra policy denying upload but I think it adds an extra layer of security.

Hope that makes sense. 

[mchartier]

The only problem with that is that it can be easily bypassed by using a simple http post on a website that is not categorize like Online storage... but at least it's a start we all do.