Proxy Allow specific action on website

[kostasthedelegate]

Hello everyone, 

I have google drive blocked for everyone. 

Is there any possibility to allow specific users to perform only download and not upload??

I think specific users will be put in an identification profile. 

What about the "only download"

Thanks and regards, 

Konstantinos

[balaji.bandi]

is the user from AD ?  you can add the URL and user to allow. (make sure rule about deny or global policy

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_01001.html

[kostasthedelegate]

Hello BB, 

Thank you for the response. 

Is there sth specific in the guide that could help me allow only download from google drive, because I couldn't find the relevant section. 

What I would like to do is allow a user to download a file from gdrive and that's all. 

Regards, 

Konstantinos

[amojarra]

Hi @kostasthedelegate 

as I understand correctly you want to Allow Download ( for one User) and Block Upload to Google Drive ( for All user / or Block access to google drive for All user ) 

if that is so, Kindly check the User guide, under section : Managing Upload Requests

User Guide for AsyncOS 11.7 for Cisco Web Security Appliances - GD (General Deployment)

Page 293 Ebook, Create and configure Data Security Policy group

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[kostasthedelegate]

Hello @amojarra , 

Thank you for your answer. 

I see the Cisco Data security section. I see that in one policy I could use the "content" section to block certain file types. 

I cannot understand though how will I allow to download all files and upload none?

Regards, 

Konstantinos

[Konstantinos9]

Hi Kostas,

For what you are trying to achieve, you need to use the Application Visibility Control (AVC) feature in Access Policies. It would require you first to decrypt the traffic to be able to see the full request (POST/ PUT) in the URL.

1) If you want to apply this functionality only for a specific group of users, first create an identification profile, and specify the users you want to restrict uploading files to Google Drive.

2) Configure your Decryption policies that apply to these users to decrypt traffic for Google Drive

3) Configure the AVC engine in your Access Policies to Monitor the traffic and block uploads for Google Drive.

Users now should be able to view files on Google Drive but not upload.

Hope this helps. Let me know if you have any more questions.

Konstantinos

Customer Success Specialist - Security

[diyatrevedi]

Is there any way that I upload consumers data in pdf format on google drive and upon entering the valid reference number - only that specific MEPCO Bill should be viewed to consumers against the reference number provided? Only the users will fetch own data based on the information provided by them in order to secure personal information of other consumers.