Hot!Block Upload to specific website!

Author
amey
New Member
  • Total Posts : 6
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/02/19 04:34:24
  • Status: offline
2018/06/18 23:20:26 (permalink)
0

Block Upload to specific website!

We have got a FortiGate 50E with firmware v5.4.4 on NAT mode/Proxy based.

I would like to restrict my network users to block the upload of data on a specific website.

AnyOne here can help me implement this?

Specifically, block upload to github.com, any help is appreciated!!
#1

4 Replies Related Threads

    Asus
    New Member
    • Total Posts : 11
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/06/18 22:44:01
    • Status: offline
    Re: Block Upload to specific website! 2018/06/19 02:37:23 (permalink)
    0
    1. check in Web Rating Overrides
    2. And then block those sites using those web filter based on Category  that you may find it web filter
    3. For GitHub it comes under General interest-Bussiness block those categories or else uses those FQDN to Block
    4. And then us nslookup to check 
    5. C:\Users\varuvaiprjan>nslookup
      Default Server: globaldc.svsglobal.com
      Address: 10.1.1.1
      > github.com
      Server: globaldT.ITglobal.com
      Address: 10.1.1.1
      Non-authoritative answer:
      Name: github.com
      Addresses: 192.30.253.112
      192.30.253.113
    6. Use resolving address to block those IP by creating deny policy 
    7. if any doubt ping me 
    #2
    ywp0220
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/02/17 23:18:36
    • Status: offline
    Re: Block Upload to specific website! 2019/03/19 19:25:34 (permalink)
    0
    SriramPrakash
    1. check in Web Rating Overrides
    2. And then block those sites using those web filter based on Category  that you may find it web filter
    3. For GitHub it comes under General interest-Bussiness block those categories or else uses those FQDN to Block
    4. And then us nslookup to check 
    5. C:\Users\varuvaiprjan>nslookup
      Default Server: globaldc.svsglobal.com
      Address: 10.1.1.1
      > github.com
      Server: globaldT.ITglobal.com
      Address: 10.1.1.1
      Non-authoritative answer:
      Name: github.com
      Addresses: 192.30.253.112
      192.30.253.113
    6. Use resolving address to block those IP by creating deny policy 
    7. if any doubt ping me 




    I also have the same need to block github data uploads.
    I am not quite sure where to do it wrong, application control can only be recognized as github, and is not recognized as Github_File.Upload. So blocking is invalid
    The windows system has imported the certificate generated by the firewall. The browser accessing the web page can already see that the authenticated intermediate device is a firewall. But I am not sure if the client of github can be decrypted normally. What should I do?


    #3
    Dave Hall
    Expert Member
    • Total Posts : 1457
    • Scores: 160
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    Re: Block Upload to specific website! 2019/03/20 13:08:31 (permalink)
    0
    Application control sensors are processed from top-down, so the Github.file.Upload sensor block should be on top.  Mind you, if you are using security certificate inspection, fgt may not detect what is happening in that encrypted tunnel. 
     

    Attached Image(s)


    NSE4/FMG-VM64/FortiAnalyzer-VM/5.4/6.0 (FWF40C/FW92D/FGT200D/FGT101E)/ FAP220B/221C
    #4
    ywp0220
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/02/17 23:18:36
    • Status: offline
    Re: Block Upload to specific website! 2019/03/21 00:08:58 (permalink)
    0
    Dave Hall
    Application control sensors are processed from top-down, so the Github.file.Upload sensor block should be on top.  Mind you, if you are using security certificate inspection, fgt may not detect what is happening in that encrypted tunnel. 
     





    Hi,
    What is your software version? How can I choose Github_File.Upload separately? I choose Github_File.Upload will definitely depend on Github. My software version is v6.0.4
    post edited by ywp0220 - 2019/03/21 00:11:06
    #5
    Jump to:
    © 2019 APG vNext Commercial Version 5.5