How to Allow File Downloads from a Specific URL

[JimAraujo]

Hello all,

Is there a way to allow file download/upload from a specific URL? We currently block most file downloads/uploads however we have specific website that users upload and download attachments toover https.

Thank you all for your help!

[BPry]

You would have to have a specific rule that is associated with a File Blocking profile, simply build a rule above that one without your File Blocking profile assigned and then it will work perfectly fine. 

[JimAraujo]

That was my thoughts excatly, however I am not getting the desired behavior. I've create a new security poliy rule above the one that contains the default file blocking one...in this new rule I have file blocking profile set to none. For the second part of my qusestion, trying limit this rule to hit only on a specific URL I've done the following.

Create a new custom URL category called FileDownloadURLs, within that Custom URL category I've put in *.service-now.com which is the specific URL we want to allow file uploads and downloads. 

Now back to the security rule I created above, I've selected in URL Category section the "FileDownloadURLs" custom category Icreated.

Issue is when browsing to the site and tyring to upload, I am seeing in the threat logs it is being blocked by the security policy at the bottom? So it's not hitting the one I created.

Before I go more into this...Is this the best way to limit file downloads based on a single URL or domain?