Block cloud-based storage

[corey]

Does anyone know how to block cloud-based storage sites such as dropbox, sugarsync, amazon, etc.?  We don't necessarily want to block all file uploads, though.

[edadios]

Hello Corey,

If you are using Cisco Ironport Web Usage Control, you can configure to filter the URL category Online Storage and Backup.

GUI > Web Security Manager > Access Policies > Under the Url Filtering Section, select for the group> then under the Predefined URL Category Filter > Select to block >>Online  Storage and Backup.

Example of logs after setting such for dropbox, sugarsync, and aws.amazon

1303257566.007 1 64.104.205.215 TCP_DENIED/403 2035 GET http://www.dropbox.com/ - NONE/- - BLOCK_WEBCAT_11-ericpollicy-ercipc-NONE-NONE-NONE-NONE -

1303257604.081 1 64.104.205.215 TCP_DENIED/403 2061 GET http://www.sugarsync.com/favicon.ico - NONE/- - BLOCK_WEBCAT_11-ericpollicy-ercipc-NONE-NONE-NONE-NONE -

1303257653.667 27 64.104.205.215 TCP_DENIED/403 2039 GET http://aws.amazon.com/s3/ - NONE/- - BLOCK_WEBCAT_11-ericpollicy-ercipc-NONE-NONE-NONE-NONE -

I hope this helps and answers your query.

Regards,

Eric

[corey]

Thanks, but I don't have Online Storage and Backup as a predefined URL category. We're on AsyncOS for Web 7.1 if that matters.

[edadios · Accepted solution]

There are two category database that can be used.

One is Cisco Ironport Web Usage Control, the other is Ironport URL filters. You have to check what is configured. On GUI > Security Services > Acceptable Use Control >  Check What accesptable use control service is configured.

Since you say you don't have on line backup category, then you must be using Ironport URL Filter.

This is then categorized as Downloads.

With Ironport URL Filter Database, Downloads refer to:

Sites hosting downloadable (non-streaming) movie, video or sound clips; downloadable PDA software
(including themes and graphics); clip art, fonts and animated gif pages; as well as freeware and shareware. Sites for personal storage or backup.

So you can configure to block downloads, but that may also block other sites you may want to allow. In that case, you will have to configure a Custom URL Filter.

Depending on which haa more site, the ones you want to blosk, or the ones you want to allow, you may configure a customer url category to block those sites, and leave the dwnloads default setting, or you may block downloads, and configure customer url category to monitor the other sites that may be blocked due to downloads category.

I hope this answers your query.

Regards,

Eric

[corey]

That's very helpful, thank you!