WSA block file by filehash

[tamaszoltan]

Hello,

Is it possible to block download files by file hash somehow on the WSA?

Thanks!

Regards,

Zoltan

[Handy Putra · Accepted solution]

Hi Zoltan,

I believe, WSA unable to block access/download based on file hash manually.

WSA does has File Analysis and File Reputation engine (AMP) and this is separate license, however this engine will only scans file downloads and give analysis and reputation of the file based on SHA value and at the moment can only perform scans for certain file types only such as Adobe, and Microsoft office files, Windows/DOS Executable. The only configuration can user perform for this scanning is to either monitor or block based on the scan verdict.

Regards

Handy Putra

[tamaszoltan]

Hello Handy,

Thanks for your response.

Regards,

Zoltan

[Sapan Goel]

Hi Zoltan, In addition to what Handy mentioned, we are working on Integrating WSA with AMP Unity. This is targeted for WSA 11.5 release and is expected to be available for Limited Deployment (LD) in the month of May. Using AMP unity you can define File Hash that you want to block on WSA. This will work only if you have AMP on WSA license. Once the LD release is available, do reach out to TAC if you are interested in trying out this feature in Limited Deployment.

Thanks

Sapan