Skip to main content
nbctcp
New Member
September 11, 2016
Question

Blocking "Internet Download Manager"

HW INFO:

-FGT 80cm

-OS 5.4.1

 

The latest discussion about this is 2009.

How to block Internet Download Manager (IDM), using FTP HTTP or HTTPS protocol

After doing some test, these Firewall can't block IDM

Cyberoam, FortiGate, PaloAlto, SonicWall

 

These FW can block IDM

CheckPoint, Sangfor

 

Hope Fortigate can block IDM which unsolvable since 2009

If someone can block IDM. let me know your settings

 

UPDATE:

1. 

    2 replies

    hmtay_FTNT
    Staff
    Staff
    February 23, 2017

    Hello nbctcp,

     

    IDM does not have a set or protocol they use. All it does is split the download into multiple chunk sizes with the HTTP header "Range: bytes=". We cover these headers with the Application Control signatures "HTTP.Segmented.Download" and "HTTP.Download.Accelerator". If you download via HTTPS, please enable SSL deep inspection in FortiOS 5.0 and above.

     

    In addition, you will need to add the following custom application control signature for FTP segmented downloading.

     

    F-SBID( --protocol tcp; --flow from_client; --service FTP; --pattern "REST|20|"; --context packet; --within 5,context; --no_case; --app_cat 15; --weight 20; )

     

    Please let me know if the above instructions do not work.

    CreativeQuery123
    New Member
    August 11, 2023

    Hi Team,

     

    Are you able to block the Internet download manager with application specific signature ? 

     

    If so what is the procedure. 

     

    As it does not uses any protocol or unique headers. 

     

    Suggestions appreciated. 

     

    Thanks 

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT