Cloud file sharing: Unrestricted downloads but block / throttle uploads

[MRosloniec]

Wondering if anyone has accomplished this?  Our company has adopted a policy requiring users that need to share large files to use cloud file sharing provider X.  However, since we interact with numerous global vendors, they all obviously have their preference.  So, as such, we want to allow downloads from all cloud file sharing apps - but block or at the very least restrict uploads to a very slow speed.  I tried accomplishing this w/ QoS but that limits the entire connection.  Open to suggestions on the best way to do this.

Thanks!!

[reaper]

you can create a QoS profile that does not restrict any of your normal traffic (class4 by default) and applies a different class to any/all of the cloud solutions, so their bandwidth is severely restricted

check out this article: Getting Started: Quality of Service

[MRosloniec]

That is what we are doing today.  The challenge is that we must be able to allow downloads from such sites due to a plethora of different vendors and/or service providers we work with (we can't expect them to adhere to OUR preferred file sharing service).. yet we don't want people utilizing our connection to upload 800 wedding photos to dropbox for example.  The problem with QoS is that it applies both ways, and, also severly restricts simply browsing a file sharing site as well.  We're fine with people downloading files from them, but, if data is to leave our environment via a file sharing app we want it done on our preferred service with whom we have legal agreements with.

[BPry]

QoS can apply to either egress, ingress, or both on the Palo Alto firewall. Since your trying to throttle uploads you would apply this to the egress and leave your ingress unthroattled (Or capped at a higher speed). With the right setup this will function perfectly fine,you just have to figure out what implementation method will actually work in your enviroment.