topic Re: Allow file download and block file upload with wetransfer in Firewall and Security Management

Allow file download and block file upload with wetransfer

jvillar — Fri, 03 Jun 2022 19:44:20 GMT

I want to allow a few people download files from wetransfer  but not the upload of files. 
If I create a rule in the application layer and in services and applications I put wetransfer, 
it allow to upload and download files. If instead of wetransfer I put wetransfer-download, 
does not match the rule and goes to the next rule  that block access to wetransfer.

If I put wetransfer and in content I put file download, it does not load the wetransfer page either.

Does anyone have any idea how to do it?

Re: Allow file download and block file upload with wetransfer

genisis__ — Sun, 05 Jun 2022 09:48:15 GMT

My initial thoughts are the use of content awareness, and Identity Awareness blades to define which accounts can utilise the rule and how specific content is then handled.

Re: Allow file download and block file upload with wetransfer

jvillar — Sun, 05 Jun 2022 10:28:03 GMT

I dont understand what you mean. I have created a group with a domain user to allow him access. 
If I put wetransfer in Services&Aplication it works perfectly, but in both directions and 
I want is to only allow downloads. I have also done the test registering the equipment and 
the operation is the same. As soon as I put some limitation like only allowing downloads 
it doesn't work anymore because it doesn't match the rule.

Can you explain it a little more. Thank you very much

Re: Allow file download and block file upload with wetransfer

Chris_Atkinson — Sun, 05 Jun 2022 10:54:04 GMT

What is the order of the rules that you have created and is HTTPS inspection used?

Re: Allow file download and block file upload with wetransfer

genisis__ — Sun, 05 Jun 2022 10:57:31 GMT

Just looked at the pics, and I see what you mean, whats defined in wetransfer-download and what protocol is being used?

Re: Allow file download and block file upload with wetransfer

jvillar — Sun, 05 Jun 2022 11:46:03 GMT

I tried with https enabled and disabled and the result is the same. I go step by step so I do not 
limit the protocol or the content. First I have to get load the wetransfer page by 
allowing only the download. I attached some images of how to configure with https inspection disable
 and the result obtained. The rules are the first to avoid possible hidden problems.

Re: Allow file download and block file upload with wetransfer

the_rock — Sun, 05 Jun 2022 12:22:31 GMT

I would involve TAC into this. I had similar case with customer while back and they had to escalate it, went to R&D and they somehow fixed it, but I dont remember how, sorry.

Re: Allow file download and block file upload with wetransfer

Pako — Tue, 05 Jul 2022 12:21:16 GMT

Hello.

did you get this to work?

I am using R80.40, I am trying to allow the user the access to the web category "File Storage and Sharing" but block the category "file upload" to most of the users. With the testing rules have made it work for some applications, but not for all:

One drive, Google drive and terabox -> I was able to access the site and download and upload files to the application
Mega.com, megafire and wetransfer -> I was able to access the site and I was not able to upload any files. I got an error on the application about network issues, but not the custom blocked message we have configured on Checkpoint

Re: Allow file download and block file upload with wetransfer

jvillar — Tue, 05 Jul 2022 19:37:25 GMT

I still didn't get it to work. When I have some time I will try again. Thank you for your input. I will communicate my progress

Re: Allow file download and block file upload with wetransfer

jvillar — Wed, 06 Jul 2022 08:48:39 GMT

I have a bigger problem. If I put the rule in image 1, the firewall does not match it and cuts access  to wetransfer with a later rule.



To load the page I need to put the rule of image 2, and then the user can upload and download files

Re: Allow file download and block file upload with wetransfer

Pako — Wed, 06 Jul 2022 10:17:52 GMT

These are the rules that I am using on my tests.

Re: Allow file download and block file upload with wetransfer

Vladimir — Wed, 06 Jul 2022 10:17:59 GMT

Create two rules.

Top rule: Wetransfer AND Wetransfer-download Accept

Bottom rule: Wetransfer-Upload Block

With HTTPS enabled and nothing in the Content field.

Let me know if this works.

Cheers,

Vladimir

Re: Allow file download and block file upload with wetransfer

jvillar — Wed, 06 Jul 2022 16:51:30 GMT

The first rule prevents me from loading the google drive page and the second allows me to access, for example, wetransfer

Re: Allow file download and block file upload with wetransfer

jvillar — Fri, 08 Jul 2022 09:45:31 GMT

After several tests I have achieved that users can only download files from wetransfer, googledrive and onedrive. I have R81.10 and https inspection activated

Re: Allow file download and block file upload with wetransfer

jvillar — Fri, 08 Jul 2022 10:56:57 GMT

It has worked for me with the following rules

Re: Allow file download and block file upload with wetransfer

Pako — Fri, 08 Jul 2022 11:42:31 GMT

Thanks, now we are using the version 80.40. I will test these rules with the new release