Forum Discussion

GBurch's avatar
GBurch
Icon for Altostratus rankAltostratus
Oct 17, 2018

Allow downloads but not uploads from Online Storage (Google Drive)

We currently use a BIG-IP 7250 as a forward web proxy. I've had a request from high up the management chain to allow downloads a specific 3rd Parties Google Drive space, but not allow uploads. We block the "Personal Network Storage and Backup" URL Category in our standard policy.

 

Is there a feature on the device which would allow this fine grained level of control out of the box, or would we be looking at putting in a custom iRule for this? Traffic intelligence looked promising, but I couldn't find exactly what I was looking for.

 

Many thanks

 

cloud
filtering
Secure Web Gateway
swg
uploads

1 Reply

Sort By
  • Philip_Jonsson's avatar
    Philip_Jonsson
    Icon for MVP rankMVP
    Oct 17, 2018

    That is a very common scenario and I took a look at the SWG. Turns out that Traffic Intelligence is extremely limited. In the Traffic Intelligence policy you can only drop, reject or log the request.

     

    Are you using an explicit or transparent proxy mode?

     

    As far as I can see, you're stuck with building an iRule for it. But this also means you are forced to intercept and de-crypt the SSL session in order to see the payload and request to google. When you know how the upload works you will be able to match against it in the iRule and drop the requests.