Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 9155 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block files download using Sophos Firewall Client?

pmendoza

Is there any way (using the Firewall Client) to block users from download's files while they are browsing the Internet?

Any recommendation?

Thanks in advance...

:41383


This thread was automatically locked due to age.
Parents
  • 0

    Hello pmendoza,

    as long as the "download" is done with HTTP(S)  on the usual ports (80,443) - no. What really discerns a "download" from "browsing" is how the browser handles the file, thus as far as the HTT protocol is concerned you can't "detect" a download. Furthermore, SCF inspects only OSI layers 3 and 4 (and even there does not cover the complete suites) - it does not act on the higher layers (usually summarized as application). Gateway firewalls usually do look into the application streams - and while it's thinkable do disallow certain MIME types (e.g. application/octet-stream) this wouldn't be a general solution (you can't block e.g. image downloads without breaking most of the web pages).

    Christian

    :41385
Reply
  • 0

    Hello pmendoza,

    as long as the "download" is done with HTTP(S)  on the usual ports (80,443) - no. What really discerns a "download" from "browsing" is how the browser handles the file, thus as far as the HTT protocol is concerned you can't "detect" a download. Furthermore, SCF inspects only OSI layers 3 and 4 (and even there does not cover the complete suites) - it does not act on the higher layers (usually summarized as application). Gateway firewalls usually do look into the application streams - and while it's thinkable do disallow certain MIME types (e.g. application/octet-stream) this wouldn't be a general solution (you can't block e.g. image downloads without breaking most of the web pages).

    Christian

    :41385
Children
No Data