java exe Download being blocked

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

java exe Download being blocked

L4 Transporter

Hi

 

Turned on protection on one of my links and now it seems like  jdk-8u131-windows-x64.exe  is being blocked 

 

I can see this on monitor / data filtering 

 

category = computer and internet  info 

name Mictosoft PE

ID 52060 

 

I'm lost how I put in an exception - or where to put in an exception.

 

Also the web page that comes up is file transfer blocked

2 REPLIES 2

Cyber Elite
Cyber Elite

You probably attached File Blocking Profile into Policy. Click on the security policy that this traffic matched and apply changes on "Actions" tab.

 

I usually create Application filter based rule to permit software updates, Custom URL category based rule where I permit download of executables from limited sites where executables come and then rule below permits general web browsing with file blocking profile that in addition to other unwanted stuff blocks executables.

 

Profiles are Objects > Security Profiles.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Cyber Elite
Cyber Elite

after you've verified which profile is attached to your security profile:

file blocking.png

you can check which file types are being blocked (likely exe or PE has been set to block in your profile)

blocking profile.png

 

 

to block execyutables from most pages but still allow updates (java, windowsupdates, filezilla,....) you can create a security policy that allows access to certain 'good' URL categories and allow downloading executables, and a second policy to block all other exe downloads

 

Tutorial: File Blocking Profile

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 2461 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!