blocking ZOOM file sharing

[Taslica]

Hello,

I need to block zoom file sharing in my company.

there are applications signatures for zoom-uploading and downloading but they are not working properly.

all trafic are going in zoom-base and not blocking file transfers. if i block zoom-base meetings will be blocked too.

what can i do to block file transfers ?

[SutareMayur]

@TaslicaTry by creating File Blocking Profile. Create separate Security Policy for only Zoom traffic and map fie blocking profile to it.

Hope it works for your!

Mayur

[Taslica]

Hello,

if i create a policy with file blocking assigned to it, it drops all traffic. doesnot check policies below.

it works same for url filtering and other profile assignments too.

and what should i do in file blocking profile - should i use zoom file-download and upload ?

Regards

[SutareMayur]

@TaslicaUnder file blocking, try first bu blocking specific file types. And assign this profile to the only security policy which will allow only zoom traffic so it will not create any negative impact on other traffic. For this, have separate security policy for Zoom traffic.

Mayur

[Taslica]

Hello   SutareMayor

I understand what do you mean but palo alto can not understand the zoom file transfer traffics even it has zoom-upload/download signatures.

After i upload a file i can only see ZOOM-BASE on monitoring tab. If i choose zoom-base on file blocking it will block all zoom traffic.

Problem is paloalto firewall cannot understand the difference between meeting and file transfers.

Regards

[Mboghdady]

it works fine but you have to apply SSL forward proxy then you will find the uploading/downloading zoom file appears in the monitor tab 

[KrumThick]

Hi,

I am trying to implement the same at my place.

Also, are you able to view the files that have been uploaded or downloaded?