FTD SSL Inspection - Block UPLOADS

Fantas — Fri, 21 Feb 2020 17:37:56 GMT

Hi,

I want to block uploads to all public drive like dropbox, onedrive, gdrive etc.

I want to block attachment/uploads to gmail, facebook, youtube and linkedin

I have already setup SSL and ACL policies on FMC and been pushed to FTDs,

My SSL policy have cert Resign and any source and destination

ACL policy have application gmail attachment, onedrive upload, linkedin uploads, youtube upload and action Block and reset

Even after above changes I can still able to attach files in gmail and dropbox

Any idea if I am missing anything.

Re: FTD SSL Inspection - Block UPLOADS

Marvin Rhoads — Fri, 25 Oct 2019 11:17:04 GMT

I know Dropbox does certificate pinning.

https://blog.dropbox.com/topics/company/weve-got-your-back

https://www.dropbox.com/business/trust/security/architecture

I suspect Gmail does to but cannot find a definitive reference saying so.

Certificate pinning prevents intermediate devices such as FTD from acting as a man in the middle and decrypting the traffic - even if the client trusts the certificate.

topic FTD SSL Inspection - Block UPLOADS in Network Security

FTD SSL Inspection - Block UPLOADS

Re: FTD SSL Inspection - Block UPLOADS