FileBlocking only one way or ip ?

[johnny_five]

Hi, iam new to the PA product line and trying to figure out stuff in my pa220 before i release them to production.

In one of the scenarios presented; there was a request/question - is it possible to allow users to upload files to a share from one specific ip range and then deny that very ip range to download any type of files from that share ? And users on an other side be able to upload/download files.

Could the solution be some zone creation, 2 different zones and Fileblocking policy and specify direction for each file extension? And is there something thats only supported in larger models like 3020-3050 ?

I provided a scetch to try and explain what iam writing, as sometimes iam not too good at writing down in words waht iam looking to do.

[reaper · Accepted solution]

hi @johnny_five (cool nickname! #5 is alive! )

you may be overhinking it 🙂

just set a different upload and download action in the profile:

[johnny_five]

Thanks reaper, i was overthinking it. Tested this out and it works perfect, just need to turn on ssl decryption so i can block ALL downloads.

ill mark this as an accepted solution

No disassemble Number Five!