topic Re: Block cloud-based storage in Web Security

Block cloud-based storage

corey — Tue, 19 Apr 2011 17:30:06 GMT

Does anyone know how to block cloud-based storage sites such as dropbox, sugarsync, amazon, etc.? We don't necessarily want to block all file uploads, though.

Re: Block cloud-based storage

edadios — Wed, 20 Apr 2011 00:26:22 GMT

Hello Corey,

If you are using Cisco Ironport Web Usage Control, you can configure to filter the URL category Online Storage and Backup.

GUI > Web Security Manager > Access Policies > Under the Url Filtering Section, select for the group> then under the Predefined URL Category Filter > Select to block >>Online Storage and Backup.

Example of logs after setting such for dropbox, sugarsync, and aws.amazon

1303257566.007 1 64.104.205.215 TCP_DENIED/403 2035 GET http://www.dropbox.com/ - NONE/- - BLOCK_WEBCAT_11-ericpollicy-ercipc-NONE-NONE-NONE-NONE -

1303257604.081 1 64.104.205.215 TCP_DENIED/403 2061 GET http://www.sugarsync.com/favicon.ico - NONE/- - BLOCK_WEBCAT_11-ericpollicy-ercipc-NONE-NONE-NONE-NONE -

1303257653.667 27 64.104.205.215 TCP_DENIED/403 2039 GET http://aws.amazon.com/s3/ - NONE/- - BLOCK_WEBCAT_11-ericpollicy-ercipc-NONE-NONE-NONE-NONE -

I hope this helps and answers your query.

Regards,

Eric

Re: Block cloud-based storage

corey — Thu, 21 Apr 2011 03:21:59 GMT

Thanks, but I don't have Online Storage and Backup as a predefined URL category. We're on AsyncOS for Web 7.1 if that matters.

Re: Block cloud-based storage

edadios — Mon, 25 Apr 2011 01:02:38 GMT

There are two category database that can be used.

One is Cisco Ironport Web Usage Control, the other is Ironport URL filters. You have to check what is configured. On GUI > Security Services > Acceptable Use Control > Check What accesptable use control service is configured.

Since you say you don't have on line backup category, then you must be using Ironport URL Filter.

This is then categorized as Downloads.

With Ironport URL Filter Database, Downloads refer to:

Sites hosting downloadable (non-streaming) movie, video or sound clips; downloadable PDA software
(including themes and graphics); clip art, fonts and animated gif pages; as well as freeware and shareware. Sites for personal storage or backup.

So you can configure to block downloads, but that may also block other sites you may want to allow. In that case, you will have to configure a Custom URL Filter.

Depending on which haa more site, the ones you want to blosk, or the ones you want to allow, you may configure a customer url category to block those sites, and leave the dwnloads default setting, or you may block downloads, and configure customer url category to monitor the other sites that may be blocked due to downloads category.

I hope this answers your query.

Regards,

Eric

Re: Block cloud-based storage

corey — Mon, 25 Apr 2011 15:21:16 GMT

That's very helpful, thank you!