- Blocking of Whatsapp client on the end user machine
If you want to block the client on the user machine or from being installed on the user machine you would need to install AMP on the endpoints. But to just block Whatsapp communication, that can be done on Sourcefire using application filtering.
- Blocking of file uploads but allowing downloads from the drop box based sites on internet (there is provision to configure but not sure does it work as configured)
Though I have never actually set this up as you are describing it, I believe it is possible. You can create file policies where you can specify the direction of transfer, the application protocol being used, the action to take and the file type. So depending on the types of files you are uploading this may or may not be matched depending on the support for that file in Sourcefire. But there is support for Office Documents, zip, executables, PDF just to name a few.
--
Please remember to select a correct answer and rate helpful posts
--
Please remember to select a correct answer and rate helpful posts
