How to disable github upload function?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

How to disable github upload function?

L1 Bithead

1.png2.png

 

 

 

 

 

 

 

 

 
The matching APP ID is inconsistent. What should I do?
11 REPLIES 11

Cyber Elite
Cyber Elite

@sobigfat,

If you aren't decrypting traffic the firewall wouldn't be able to constantly be able to identify the app-id correctly. You could take a packet capture and see if you can find a specific URL that you can block to deny uploading specifically, or you could start decrypting traffic. 

Cyber Elite
Cyber Elite

Hello,

I agree with BPry, decrypt the traffic and then do not allow or block the application github-uploading.

 

image.png

https://applipedia.paloaltonetworks.com/

 

Regards,

@BPry Thank you for your reply, how to set up decryption is correct?

 

1.Is decryption set this way?

2.All web pages display an exception after the configuration is complete.

 

 

1.png2.png

 

 

@sobigfat,

There are plenty of guides such as this one HERE. Since the firewall needs to basically perform a MitM function against the traffic there is some additional setup that you'll need to do so that your end-devices trust certificates issued by the firewall. 

@BPry

 HI,I configured the domain certificate and the web page can be accessed normally. But there is a problem with the upload and download of github, I just want to limit the upload.How should I solve it?

 6.png2.png3.png4.png5.pngdown.pngup.png

 

 

 

@sobigfat,

Did you do as @OtakarKlier mentioned in his earlier post about denying github-uploading? 

 
I feel that I have configured decryption and rejected the github upload strategy.
Does the log do not match github-uploading traffic?
However, the current github upload and download functions do not work.
Is there a problem with the configuration?
 
3.png1.png2.png
 
 
 
 
 
 
 
 
 
4.png5.png

@sobigfat,

I just verified that with a basic Decryption profile assigned what @OtakarKlier and myself are asking you to do is able to limit upload functionality to GitHub as expected. If you continue to run into an issue I recommend that you contact support so they can spend some time looking over your configuration in-depth more then we can do here. 

@BPry

Thank you for your help.
I want to know if the environment you tested is installing GitHubDesktop with Windows.
Can you provide your configuration reference?
My paloalto device is borrowed, lisence has expired, I wonder if it will affect my test results?
I am not sure what channels the official can provide technical advice?

@sobigfat,

Yes, the desktop client was utilized for testing. 

The decryption profile was set to decrypt anything from a test machine, the security policy simply denied github-uploading. 

 

Depending on how long your device hasn't had a license, it's quite possible that your app-id signature for github-uploading is out of date and will no longer function; if that's the case, you'll need to purchase a lab license to get the latest content update. 

@BPry

I want to know the effect of your test, github limits uploading, does the download function have any effect?

How to check if the app-id signature expires?

Is it related to the APP update time in the figure below?1.png

 

 

  • 5938 Views
  • 11 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!