Decrypting WhatsApp traffic and blocking file uploads possible?

[AllwynMascarenhas]

Hi,

So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp??

I ask because WhatsApp doesn't exactly use SSL right, it's more of a PGP sort of encryption, can we decrypt that?

[kiwi]

Hi @AllwynMascarenhas ,

From the application information details:

WhatsApp has integrated the TextSecure encryption protocol, which enforces certificate pinning to its most recent update. Due to this we can longer decrypt this application, and it will be added to the SSL exclude list. Policies enforcing "whatsapp-base" will continue to function normally, but policies using "whatsapp-file-transfer" can no longer be enforced.

Cheers,

-Kiwi.