How to disable github upload function？

[sobigfat]

The matching APP ID is inconsistent. What should I do?

[BPry]

@sobigfat,

If you aren't decrypting traffic the firewall wouldn't be able to constantly be able to identify the app-id correctly. You could take a packet capture and see if you can find a specific URL that you can block to deny uploading specifically, or you could start decrypting traffic. 

[OtakarKlier]

Hello,

I agree with BPry, decrypt the traffic and then do not allow or block the application github-uploading.

https://applipedia.paloaltonetworks.com/

Regards,

[sobigfat]

@BPry Thank you for your reply, how to set up decryption is correct?

1.Is decryption set this way?

2.All web pages display an exception after the configuration is complete.

[BPry]

@sobigfat,

There are plenty of guides such as this one HERE. Since the firewall needs to basically perform a MitM function against the traffic there is some additional setup that you'll need to do so that your end-devices trust certificates issued by the firewall. 

[sobigfat]

@BPry

 HI,I configured the domain certificate and the web page can be accessed normally. But there is a problem with the upload and download of github, I just want to limit the upload.How should I solve it?

 

[BPry]

@sobigfat,

Did you do as @OtakarKlier mentioned in his earlier post about denying github-uploading? 

[sobigfat]

@BPry

I feel that I have configured decryption and rejected the github upload strategy.

Does the log do not match github-uploading traffic?

However, the current github upload and download functions do not work.
Is there a problem with the configuration?

[BPry]

@sobigfat,

I just verified that with a basic Decryption profile assigned what @OtakarKlier and myself are asking you to do is able to limit upload functionality to GitHub as expected. If you continue to run into an issue I recommend that you contact support so they can spend some time looking over your configuration in-depth more then we can do here. 

[sobigfat]

@BPry

Thank you for your help.
I want to know if the environment you tested is installing GitHubDesktop with Windows.
Can you provide your configuration reference?
My paloalto device is borrowed, lisence has expired, I wonder if it will affect my test results?
I am not sure what channels the official can provide technical advice?

[BPry]

@sobigfat,

Yes, the desktop client was utilized for testing. 

The decryption profile was set to decrypt anything from a test machine, the security policy simply denied github-uploading. 

Depending on how long your device hasn't had a license, it's quite possible that your app-id signature for github-uploading is out of date and will no longer function; if that's the case, you'll need to purchase a lab license to get the latest content update. 

[sobigfat]

@BPry

I want to know the effect of your test, github limits uploading, does the download function have any effect?

How to check if the app-id signature expires?

Is it related to the APP update time in the figure below?