Opening file download for specific URLs

[u6402]

I have recently deployed PAN 2050 in my organization. We are enabled file blocking for selected file types e.g. (EXE, BAT, CAB, ZIP, ISO, RAR etc.) in both the direction. But as per management decision I have to allow download access from Microsoft URL’s. As you are aware Microsoft is having hundreds of IP’s so I can’t achieve this using IP address. Is there any way to allow download access using the URL or domain name?

[kbrazil · Accepted solution]

Hi There,

Yes, you should be able to do this with a custom App-ID.  Within the App-ID, use web-browsing as the parent application and create a regular expression looking for microsoft.com in the URI header.  You may have to play around with this to get it right and make sure you don't affect other App-ID's for Microsoft applications/updates.  Use that custom application in a Security Policy rule and attach a file-blocking profile that allows those file types.  Make sure this Security rule is above your other rule with the more restrictive file-blocking profile.

Cheers,

Kelly