how to block internet download manager

[vongsackda]

hi everyon 

can palo alto block internet download manager?

if can, then how to block

[kiwi]

Hi @vongsackda,

How about this :

>  configure
#  set deviceconfig setting ctd skip-block-http-range no
#  commit

When skip-block-http-range is set to no, any time the Palo Alto Networks firewall sees an HTTP client request for a file with a range request in the header (for example, when resuming a file download), the firewall intercepts it and mimics a server rejecting the range request feature. This tells the client to start from the beginning of the file.

Note: This is global feature to turn on and off which can impact legitimate applications.

Also explained in this article : How-to-Block-Multi-thread-HTTP-Downloads

Cheers !

-Kiwi.

[vongsackda]

this solution it not solve

[kiwi]

Hi @vongsackda,

It's been 5 months since the last reply on this 🙂

We'll need a little more info than that to work with.

Can you add some more details ?

Note : I've noticed that the proposed CLI from the previous comment isn't available on all platforms.

For example :

This command isn't available on a PA-200 running PAN-OS 8.1.1

This command IS available on a PA-5220 running PAN-OS 8.0.8

Cheers,

-Kiwi.