I understand the main purpose of the continue action, and the additional level of effort the end user must take to ensure they intended to download a specific file. Can anyone verify that the continue feature works if someone was trying to upload a file? Think of a scenario where a company roles out a new AUP and they are trying to ease the employees into following corporate policy for data being sent through a means deemed unacceptable. It would be nice if you could set a custom block, or continue page to notify the end user that the chosen transfer medium may no longer be in compliance with corporate policy.
It would be fair easy to test, but unfortunately I don't have a way to test tonight, and kind of need a quick answer. If anyone has any input it would be greatly appreciated!
Thanks in advice,
Solved! Go to Solution.
The file blocking feature
You should be having the direction set to "both" in the file blocking profile.
Since the traffic is governed through the security policies in the firewall, it is all zone based.
The security profile that needs to be applied to the policies should be the following across the zones. For example , say block .exe files.
Security Rule in this case would be the following:-
The file block page/custom page will be displayed for the file types ".exe" through across the zones. The file type should match with the type set for either "block" or "continue" to trigger the response page.
If you need to set up custom page, you can upload under Device>Response Page
Let me know if that helps.
Thank you for your quick response Parth,
I understand that the security profile needs to be associated to a specific zone, but my main concern is the fact that I can not find anywhere stating that if user A opens a .pdf file (or a .exe in your example), and tries to push that file through the egress traffic of the Trust to the Untrust zones to Dropbox/Google Drive and I have a rule setup similar to yours but it states upload instead of both have continue instead of block...will that user be challenged with a continue page.
Wow, I really just wrote a paragraph using one sentence...need sleep. Thanks again Parth I really appreciate it. I hope this makes sense and if you can just verify that the outcome would be the same I am 100% happy. I am trying to complete a final document, and have been assuming that this just worked and when I logged into the response page to edit a custom page for them I noticed it said downloads, and never mentioned uploading. Thats what made me second guess everything.
I really appreciate the time you took to help out seriously!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!