Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 9349 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

File Download interrupted

StefanoColombo

We are having issue with file downloads

Firewall XG virtual appliance on VMware 16.05 MR8

Users gets an interrupted file download error even with small files ( 4.5MB )

No IPS enabled on the relative firewall rule

 

Has anyone had the same issue ?

thanks



This thread was automatically locked due to age.
Parents
  • 0

    Found the problem .

    we want to block executable files downloads so we added it in the web policy , unfortunately this cause the problem with the ZIP file as well .

    In fact when a user tries to download compressed files it gets inspected and if some executable are found inside the download is aborted , without any message , so the browser starts again and again ...

    Been said by the support this is "normal" behavior and cannot be fixed ...

  • 0 in reply to StefanoColombo

    MIME type blocks occur within zip files as well (I don't recall if file extensions are).  This is by design.  If you don't want your users downloading executables, you should not want them to download zips containing executables.

    If you are using Scan Mode Batch then the entire file is downloaded and scanned by XG before being sent to the user.  If the download will is blocked, the user is sent a blockpage with helpful text.

    If you are using Scan Mode Realtime then the file is simultaneously scanned and sent to the user.  If the scan determines the download should be blocked, the connection is dropped and the download fails.

    Batch mode gives you better user messaging.  Realtime gives you a faster start to the download.

Reply
  • 0 in reply to StefanoColombo

    MIME type blocks occur within zip files as well (I don't recall if file extensions are).  This is by design.  If you don't want your users downloading executables, you should not want them to download zips containing executables.

    If you are using Scan Mode Batch then the entire file is downloaded and scanned by XG before being sent to the user.  If the download will is blocked, the user is sent a blockpage with helpful text.

    If you are using Scan Mode Realtime then the file is simultaneously scanned and sent to the user.  If the scan determines the download should be blocked, the connection is dropped and the download fails.

    Batch mode gives you better user messaging.  Realtime gives you a faster start to the download.

Children
  • 0 in reply to Michael Dunn

    “If you don't want your users downloading executables, you should not want them to download zips containing executables.”

    I don’t agree with that . I may want to stop downloading executable by itself but not blocking ZIP files ( which might contain exe)

    Thanks for other helpful info

    Stefank