This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filter Block File Transfer/Remote Access, AppCtrl Allow only Dropbox, Skype, TeamViwer

How do you control Access with AppCtrl because I don’t find it very useful.

If I Block “File Transfer” category and I want to override (allow) only Dropbox for some group of user’s and if I create Dropbox in AppCtrl with Action Allow it’s still blocked because URL Filter still block’s it.

So, AppCtrl is combination of URL’s and User-Agents? Or, how do you block “All File Tranfer” and allow ony Dropbox.

As File Transfer, same question for TeamViwer and “Remote access category”?

Same with Skype and SSL Interception because you cannot do SSL Exception for App?



This thread was automatically locked due to age.
  • Also want to Add that I want to create let’s say TAGed URL’s, so I go to Add Site’s and you cannot use Regular Expressions there so it’s a bit confused again. If I go into “Allow These Website” under Policy I can create Object and populate it with Regular Expressions because If I take a look at Google Drive  (https://support.google.com/a/answer/2589954?hl=en) I must use Regular Expression because URL’s and that is not possible at Filtering Options->Websites-> because there Regular Expression is not a valid entry.

    I can create Exception, but that is really hard to manage so what’s the point of Allowed Websites where I can use Regular Expression but I cannot Share same object in multiple profiles or Website’s recategorization where I cannot use RegEx...

  • To understand that Application Control can't allow a packet blocked by URL Filtering, see #2 in Rulz.

    In AppCtrl, as in all places in WebAdmin where there is a numbered list, rules are considered in order and once the packet qualifies for a rule, no further rules are considered for it.  This means that the rule allowing Dropbox must come before one that blocks all file transfer protocols.  This is also the reason that there are no Exceptions per se in AppCtrl - Exceptions are used in areas where there is no numbered list.

    Cheers - Bob
    PS An unwritten rule here is "one topic per thread" - If there's another question unrelated to my response, please open a separate thread.

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA