File Blocking and the Continue Action

[jclimer]

Hello,

I understand the main purpose of the continue action, and the additional level of effort the end user must take to ensure they intended to download a specific file.  Can anyone verify that the continue feature works if someone was trying to upload a file?  Think of a scenario where a company roles out a new AUP and they are trying to ease the employees into following corporate policy for data being sent through a means deemed unacceptable.  It would be nice if you could set a custom block, or continue page to notify the end user that the chosen transfer medium may no longer be in compliance with corporate policy.

It would be fair easy to test, but unfortunately I don't have a way to test tonight, and kind of need a quick answer.  If anyone has any input it would be greatly appreciated!

Thanks in advice,

jc   

[ppatel]

The file blocking feature

You should be having the direction set to "both"  in the file blocking profile.

Since the traffic is governed through the security policies in the firewall, it is all zone based.

The security profile that needs to be applied to the policies should be the following across the zones. For example , say block .exe files.

Security Rule in this case would be the following:-

The file block page/custom page will be displayed for the file types ".exe" through across the zones. The file type should match with the type set for either "block" or "continue" to trigger the response page.

If you need to set up custom page, you can upload under Device>Response Page

Let me know if that helps.

Regards

Parth

[jclimer]

Thank you for your quick response Parth,

I understand that the security profile needs to be associated to a specific zone, but my main concern is the fact that I can not find anywhere stating that if user A opens a .pdf file (or a .exe in your example), and tries to push that file through the egress traffic of the Trust to the Untrust zones to Dropbox/Google Drive and I have a rule setup similar to yours but it states upload instead of both have continue instead of block...will that user be challenged with a continue page.

Wow, I really just wrote a paragraph using one sentence...need sleep.  Thanks again Parth I really appreciate it.  I hope this makes sense and if you can just verify that the outcome would be the same I am 100% happy.  I am trying to complete a final document, and have been assuming that this just worked and when I logged into the response page to edit a custom page for them I noticed it said downloads, and never mentioned uploading.  Thats what made me second guess everything.

I really appreciate the time you took to help out seriously!

jc

[ppatel · Accepted solution]

Jason,

The upload action should work in the case of file upload to drop-box with the security rule as mentioned above in the security rule.

Regards

Parth

[jclimer]

Awesome Parth,

Thank you again my friend, I really appreciate it!  Your input has been a huge benefit.

[ppatel]

Anytime Jason

If there are any issues with this, please open a support ticket and we will be able to assist you.

Have fun!!!

Regards

Parth