unable to block downloads Command-Line Download Accelerator

cancel
Showing results for 
Search instead for 
Did you mean: 

unable to block downloads Command-Line Download Accelerator

L3 Networker

Hello,

 

I created a file download profile which allows only download rpm,bzip2,gzip and blocked rest. When I use wget iso file download blocked. When I use "axel" iso file download not blocked. What is the difference and how can I completely restrict download.

Thanks.

"Axel, a Command-Line Download Accelerator for Linux"

Tested on PanOS-9.1

 

 

Used Centos,

İssued commands,

wget --no-check-certificate target=_blankhttps://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-desktop-amd64.iso

axel --alternate  target=_blankhttps://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-desktop-amd64.iso

UP
6 REPLIES 6

Cyber Elite
Cyber Elite

Hello,

I would start by checking the logs to see how the PAN identified the traffic when issuing the axel command. Then from there see if I can block the URL's/Application, etc.

Regards,

Traffic identified as web-browsing. I think Somehow axel acting like browsing file.

Thank you for reply.

UP

Cyber Elite
Cyber Elite

Hello,

I'm guessing you already have the application type set to 'any'?

Regards,

Policy structure,

Security Policy;

Allowed applications;

dnf,ssl,web-browsing,yum

 

Allowed services,

tcp 443

tcp 80

 

Allowed URL categories in security Rule URL Category Match Field

Computer-internet-info

web-hosting

 

Profile;

IPS, Antispyware,URL, File Blocking Profiles are set

 

Decrytipn Policy;

All trafic are decrypted.

 

 

 

 

 

UP

Cyber Elite
Cyber Elite

Hello,

I would be interested in what support would say about this.

Regards,

L3 Networker

Hello,

TAC response is; in 10.x OS file blocking works but 9.1 OS allowing download. I do not have 10.x right now so i could not test.

 

UP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!