File blocking and Google Chrome

[Chris.Ka]

Hi there! 

I have the problem that the file blocking no longer works properly at the chrome browser.

The fileblocking profile was configured and appended to the rule, but I can still download msi files. PANOS 9.1.0

Does anyone have suggestions how i can fix this? 🙂

[upelister]

Hello,

Chrome sometimes using tricky quick protocol so in firewall appliaction as seen "quick" in firewall logs. Do you have any chance to try this.

For Security Rule;

From a Test host to internet block "quick" so chrome cannot change its behaviour.

For Decryption Rule;

From a test host to internet decrypt all traffic.

*I am using TCP and UDP 443 on decryption policies.

Then analyze log maybe this method can give a clue about why msi file not blocked by firewall.

*before testing be sure, there are no active connection exist from test host to internet, monitor tab>session browser if there is any kill them all.

Have a nice day.

[Chris.Ka]

Hi,

Quic is already blocked (see screenshot in my first post) and the traffic is decrypted successfully. 😕

My PA-820 doesn't recognize the resume-download as an msi file.

I think this issue has occurred since the update to 9.0 a few months ago.