Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 9153 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block files download using Sophos Firewall Client?

pmendoza

Is there any way (using the Firewall Client) to block users from download's files while they are browsing the Internet?

Any recommendation?

Thanks in advance...

:41383


This thread was automatically locked due to age.
  • 0

    Hello pmendoza,

    as long as the "download" is done with HTTP(S)  on the usual ports (80,443) - no. What really discerns a "download" from "browsing" is how the browser handles the file, thus as far as the HTT protocol is concerned you can't "detect" a download. Furthermore, SCF inspects only OSI layers 3 and 4 (and even there does not cover the complete suites) - it does not act on the higher layers (usually summarized as application). Gateway firewalls usually do look into the application streams - and while it's thinkable do disallow certain MIME types (e.g. application/octet-stream) this wouldn't be a general solution (you can't block e.g. image downloads without breaking most of the web pages).

    Christian

    :41385
  • 0

    Problem is that items are being downloaded when Users are by company policy not allowed to download (i.e. movies, music, software, etc.).

    Can't block all downloads as some employees have valid reason to download.

    How to detect when a user is downloading - no known means to focus on downlaods to list / email admin when such is underway or at best is difficult to determine in current logs of v9.03.

    :56607