unable to block downloads Command-Line Download Accelerator

[upelister]

Hello,

I created a file download profile which allows only download rpm,bzip2,gzip and blocked rest. When I use wget iso file download blocked. When I use "axel" iso file download not blocked. What is the difference and how can I completely restrict download.

Thanks.

"Axel, a Command-Line Download Accelerator for Linux"

Tested on PanOS-9.1

Used Centos,

İssued commands,

wget --no-check-certificate target=_blankhttps://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-desktop-amd64.iso

axel --alternate  target=_blankhttps://releases.ubuntu.com/20.04.3/ubuntu-20.04.3-desktop-amd64.iso

[OtakarKlier]

Hello,

I would start by checking the logs to see how the PAN identified the traffic when issuing the axel command. Then from there see if I can block the URL's/Application, etc.

Regards,

[upelister]

Traffic identified as web-browsing. I think Somehow axel acting like browsing file.

Thank you for reply.

[OtakarKlier]

Hello,

I'm guessing you already have the application type set to 'any'?

Regards,

[upelister]

Policy structure,

Security Policy;

Allowed applications;

dnf,ssl,web-browsing,yum

Allowed services,

tcp 443

tcp 80

Allowed URL categories in security Rule URL Category Match Field

Computer-internet-info

web-hosting

Profile;

IPS, Antispyware,URL, File Blocking Profiles are set

Decrytipn Policy;

All trafic are decrypted.

[OtakarKlier]

Hello,

I would be interested in what support would say about this.

Regards,

[upelister]

Hello,

TAC response is; in 10.x OS file blocking works but 9.1 OS allowing download. I do not have 10.x right now so i could not test.