Allow download no upload

[kushkussa]

Can some one help me on below requirement.

Need to allow users to download only of files from online-storage and backup Category and we should restrict upload.

thanks

[Edsnow]

Hi @kushkussa ,

you can create a security policy with online-storage and backup URL category as matching criteria then add a file blocking profile application and file type as any then select the direction as upload and action will be blocked. 

This way you can restrict your users to block upload files to the online-storage and backup category. 

[kushkussa]

Thanks for responding in security rule action should be allow or deny?

[kushkussa]

Also I have implemented the solution you mentioned and still no luck

[VinceM]

Hi all,

Answer is correct with the File blocking profile. Keep in mind that if you want to be able to manage files, you have to see files. Then decryption is the key. In parallel you have to block quic app for forcing TLS traffic to stay on TCP.

Rgds

[SA.Kushal]

Thanks for responding

I have already had decryption in place my traffic is decrypted still File blocking is not working.

Decryption Rule: Source test machine, destination Any Traffic action decrypted

Security Rule: Source test machine, Destination-->Any, Service--->Any, In profile called file blocking.

Still NO luck file upload is not getting blocked.

[SA.Kushal]

Also I have blocked the quic App still no luck