Blocking Google Drive

[justynfortenberry]

Hey guys,

I'm trying to block Google Drive. I've tried a variety of things: URL Filtering for online-storage (which works for Dropbox, icloud etc). But Google Drive still works...I researched and found quite a few forum posts on the topic and see that decryption is most likely required in order to see the traffic in order to block it.

Is there a way to block Google Drive without enabled decryption?

I've got a PA 3020 on 7.1.6

[BPry · Accepted solution]

I'm not going to say that it isn't possible to block Google Drive without decrypting the traffic. That being said though, pretty much anything with Google services is going to work pretty poorly unless you are decryting the traffic. 

[SuperMario]

Here is how you can block Google Drive or any other Google app like the new Google Backup and Sync without doing decryption:

https://live.paloaltonetworks.com/t5/Management-Articles/Google-Drive-Does-Not-Match-to-quot-online-...

The above article also explains why, due to SSL encryption, this type of apps is allowed.

Cheers,

[Raido_Rattameister]

@SuperMario last line of the link you provided: 

Note: SSL decryption is necessary in order to identify the correct app-id "google-drive-web".  

You need to decrypt traffic.

[AmeyVichare]

Is it possible to only block uploads on GDrive as blocking "google-drive-web" application blocks both download and upload on GDrive

or to just block the uploads i need to configure DLP ?