Whats with leapfile being blocked?

[keithsauer507]

Increasingly we have been getting requests to unblock something called leapfile.  Here is an example messgage they get:

Blocked site:     something.leapfile.net

Blocked Category:     Business and Industry

User:          DOMAIN\user@Windows

User Group:     BLOCK_AVC-11-Executive_Management-Authenticated_Users-DefaultGroup-NONE-NONE-NONE

Reauth_URL:     -

Base64Decode error '800a0001'

Bad Base64 string.

/ironport/blocked.asp, line 78

Seems like you have to allow this in 3 places?  Thats a bit much isn't it?  You have to add:

.leapfile.com

.leapfile.net

to the URL allowed category where the user is mapping to.

Then you have to drill down in the applications block/warn/monitor area for the policy they are mapped to and expand it and change leapfile from block to monitor there.

Whats with all of these layers and why all of a suddon are there so many requests for this leapfile site?  I went to their corporate site and it sounds legitimate, so if it is legitimate why is it being blocked by default.

[Ken Stieers · Accepted solution]

Blocked site:     something.leapfile.net
Blocked Category:     Business and Industry
User:          DOMAIN\user@Windows
User Group:     BLOCK_AVC-11-Executive_Management-Authenticated_Users-DefaultGroup-NONE-NONE-

Keith,

AVC=Application Visiblity and Control, so go to Web Security/Access Policies and in the policy(s) that you manage applications, click the "Applications", Leapfile is listed in the File Sharing section.

My guess is that its blocked here... Unblock it here and you should be able pull it from the URL/Categories...

Ken

[keithsauer507]

Ken you are absolutely right.  Thank you

[Ken Stieers]

You're welcome, happy to help...

You should probably look through the AVC thing to see if there any new apps that you want to block/unblock on some sort of regular basis.  The box automatically downloads new definitions, but we don't get any notification of new applications, so they take on the default for the type of app.

I'm pretty sure I submitted a feature request so that we get notifications on apps, like we do when they make category changes...

Ken

[keithsauer507]

Good idea.  I don't remember ever hearing about leapfile before but after some research it seems to be a good secure way for people to transfer files, especially if it has accounting or auditing data or any other sensitive information.  I think that's what confused me at first because simply adding the URL's did not allow the site to load.

When you bolded AVC from my block message and stated "AVC=Application Visibility and Control" that also helps me understand and better decode a blocked site message.

Its nice that the aplications get updated automatically though, but I do love your feature request.

Take care,

Keith