topic Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20? in Firewall and Security Management

Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20?

Bishal_Upadhyay — Mon, 18 Mar 2019 10:40:28 GMT

Hi Everybody,

We just tried to block exe download for specific user/network by enabling content awareness and through using it in the access policy as shown in screenshot attached herewith. But it is not working.

Is HTTPS Inspection mandatory for this one?

We have used standalone firewall with Gaia OS R80.20.

With Regards,

Bishal Upadhyay

Re: Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20

Danny — Mon, 18 Mar 2019 10:51:30 GMT

Yes, HTTPS Inspection is mandatory for this task if you want to block .exe files for HTTPS websites. Content Awareness does not look into HTTPS streams itself.

Re: Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20

Bishal_Upadhyay — Mon, 18 Mar 2019 12:45:03 GMT

Hi Danny,

Thanks for the reply. I will keep that in mind.

Re: Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20

G_W_Albrecht — Mon, 18 Mar 2019 15:03:05 GMT

Why did you post this in SMB Appliances and SMP ?

Re: Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20

Bishal_Upadhyay — Tue, 19 Mar 2019 08:34:05 GMT

Sorry my bad