There really isn't a way to disallow specific methods within a given protocol (such as PUT in HTTP), without disabling it entirely or breaking a given web app.
The only thing that you can do is block a web app entirely, like Facebook, or block various individual file transfer means (such as FTP, SMB, WebDAV, etc.), but this would block downloads as well as uploads.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
Vivek, could you provide a specific example of something you want to block? I think Scott's right; there's no good answer for the general question you've asked.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
Sorry, Let me just give you example, if we want users can access the facebook, but i want to block uploading on facebook, like pic and all through app control. One more thing, may be wrong to ask, but like RSA do, can we block uploading specific file extension like doc, ppt, xls. Like we do in case of downloading..!!
if we want users can access the facebook, but i want to block uploading on facebook, like pic and all through app control
As I posted above, there isn't a way to do this without blocking portions of the http specification itself and it would break the app. For example, even if there was a web proxy that would allow you to block usage of the PUT method (used to send data), you would then also not be able to login because you have to PUT to send the username and password. This could be solved by adding DLP (see below) and blocking upload content based on file types, such as tiff, jpg, png, etc.
can we block uploading specific file extension like doc, ppt, xls. Like we do in case of downloading
Not currently for web. This is a technology family generally known as DLP or Data Loss (or Leak) Prevention and doesn't currently exist in Astaro. There is already a feature request for this functionality if you want to add points or a comment to it: Networking: Data Leak Prevention System (DLP).
A way to get your feet wet and try this out now is to implement the community edition of http://www.mydlp.org/.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
