topic Re: Block File upload to cloud storage in Firewall and Security Management

Block File upload to cloud storage

Robert_Mueller — Thu, 16 Nov 2017 09:47:05 GMT

Hi,

We move from an McAfee Proxy to Checkpoint (transparent proxy) and I have to block the possibility to upload files to any cloud storage providers (Google Drive, Dropbox... a.s.o).. I've tried it with the application control and block for example Dropbix with the attached rule (this also wont work).. but I have to block all storage provider.. is there a way to do this?

robert

Re: Block File upload to cloud storage

PhoneBoy — Sat, 18 Nov 2017 00:23:49 GMT

Some of these applications require enabling HTTPS Inspection.

Have you done that in this case?

Re: Block File upload to cloud storage

Hugo_vd_Kooij — Mon, 20 Nov 2017 08:41:01 GMT

You may get some of it done without HTTPS inspection by looking at the Certificates.

Application & URL Filtering => Advanced => Engine Settings:

Make sure you enable Categorize HTTPS sites if you do NOT enable HTTPS inspection!

And make sure you do NOT use it if you use HTTPS inspection!

But keep in mind that there is no way to distinguish between Google Drive, YouTube or any other Google service as they all use the same certificate. (Rather cheap Google!)

Re: Block File upload to cloud storage

Kannansr — Sun, 30 Apr 2023 00:55:04 GMT

Hi Team,

Google API upload & download to be blocked as per Cymulate Security Assessment. But, Checkpoint categories have Google services, if I added google services under block rule, All other sites (That fall under GoogleServices )Included Google API urls blocked. What is best way (Recommended Best Practice) to block Google APIs urls in Checpoint ?