Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

weipyang
New Contributor

How to configure to block github upload?

cert
app control
policytest

My configuration is as shown above, but there are problems with the upload and download of github. What should I do?

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
16 REPLIES 16
YohaDAVI
New Contributor

Hello,

Just one question : do you have UTM license on your firewall ? If yes, you just have to create a profile and add an "application override" by selecting "github" and apply action you want (block, monitor, pass).

Github signature

Hope it will help

Yohann

------------------------------
Yohann [LastName] [Designation]
Ing?nieur syst?me / r?seaux
[CompanyName]
[City] [State]
[Phone]
------------------------------
weipyang

@Yohann
My fortigate is a test device and I am not sure if there is a UTM license.

3

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
DeepKuma2
Contributor

Hi,
All screenshots are in your local language so I can't understand actually what is this. But getting idea based on the option you had choosing in the configuration.

I checked your screenshot as I can and got that you had blocked "github_file_upload" signature in the application control policy. Make it allow and check again.

------------------------------
Deepak Kumar
First Option General Trading LLC
Dubai
------------------------------
Deepak Kumar First Option General Trading LLC Dubai
Deepak Kumar First Option General Trading LLC Dubai
weipyang

@Deepak
I have allowed all apps to pass, but as soon as the app control switch is turned on, github uploads and downloads will report an error.
1
2

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
-------------------------------------------
Original Message:
Sent: 03-06-2019 02:29
From: Deepak Kumar
Subject: How to configure to block github upload?

Hi,
All screenshots are in your local language so I can't understand actually what is this. But getting idea based on the option you had choosing in the configuration.

I checked your screenshot as I can and got that you had blocked "github_file_upload" signature in the application control policy. Make it allow and check again.

------------------------------
Deepak Kumar
First Option General Trading LLC
Dubai
------------------------------

Original Message:
Sent: 03-06-2019 02:19
From: weiping yang
Subject: How to configure to block github upload?

cert
app control
policytest

My configuration is as shown above, but there are problems with the upload and download of github. What should I do?

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
YohaDAVI

Hello Weiping,

I'm not sure about what you want to do ! Because first of all, you requested to know how it's possible to block Github. And now, it seems to be blocked and you report that it's abnormal to have errors.

So, what do you want exactly ? What application must be blocked and other unblocked ? Did you do a "debug flow" to see where is the problem ?

Moreover, keep in mind what was said before : all your screens are in local language... Not easy for us to traduce.

Best regards,
Yohann

------------------------------
Yohann [LastName] [Designation]
Ing?nieur syst?me / r?seaux
[CompanyName]
[City] [State]
[Phone]
------------------------------
weipyang

hi Yohann

I just hope that I can block the file upload of github. 
But the effect of the test is that the github download file is also affected.
I want to know how the configuration is correct.

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
YohaDAVI

Hello again,

According to my screenshot, i think you have to create an application control profile.

On it, you have to create an override :


Then looking for Github and choose one you want to allow or block :

Github
Then, you have create this profile, apply it to a policy like from lan to Wan, ...

Keep us informed.

------------------------------
Yohann [LastName] [Designation]
Ing?nieur syst?me / r?seaux
[CompanyName]
[City] [State]
[Phone]
------------------------------
weipyang

Thank you for your reply, I am not quite sure where to do it wrong, application control can only be recognized as github, and is not recognized as Github_File.Upload. So blocking is invalid
123
4

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
DeepKuma2

Hi,
Best Idea to tshoot this issue is trace packets "diag sniffer packet internal 'src host x.x.x.x and port "xxx"' 1

For a testing purpose, allow the upload file also check a result.

------------------------------
Deepak Kumar
First Option General Trading LLC
Dubai
------------------------------
-------------------------------------------
Original Message:
Sent: 03-13-2019 03:46
From: weiping yang
Subject: How to configure to block github upload?

Thank you for your reply, I am not quite sure where to do it wrong, application control can only be recognized as github, and is not recognized as Github_File.Upload. So blocking is invalid
123
4

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------

Original Message:
Sent: 03-07-2019 07:34
From: Yohann DAVID
Subject: How to configure to block github upload?

Hello again,

According to my screenshot, i think you have to create an application control profile.

On it, you have to create an override :


Then looking for Github and choose one you want to allow or block :

Github
Then, you have create this profile, apply it to a policy like from lan to Wan, ...

Keep us informed.

------------------------------
Yohann [LastName] [Designation]
Ing?nieur syst?me / r?seaux
[CompanyName]
[City] [State]
[Phone]

Original Message:
Sent: 03-07-2019 05:11
From: weiping yang
Subject: How to configure to block github upload?

hi Yohann

I just hope that I can block the file upload of github. 
But the effect of the test is that the github download file is also affected.
I want to know how the configuration is correct.

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]

Original Message:
Sent: 03-07-2019 04:11
From: Yohann DAVID
Subject: How to configure to block github upload?

Hello Weiping,

I'm not sure about what you want to do ! Because first of all, you requested to know how it's possible to block Github. And now, it seems to be blocked and you report that it's abnormal to have errors.

So, what do you want exactly ? What application must be blocked and other unblocked ? Did you do a "debug flow" to see where is the problem ?

Moreover, keep in mind what was said before : all your screens are in local language... Not easy for us to traduce.

Best regards,
Yohann

------------------------------
Yohann [LastName] [Designation]
Ing?nieur syst?me / r?seaux
[CompanyName]
[City] [State]
[Phone]

Original Message:
Sent: 03-06-2019 21:57
From: weiping yang
Subject: How to configure to block github upload?

@Deepak
I have allowed all apps to pass, but as soon as the app control switch is turned on, github uploads and downloads will report an error.
1
2

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]

Original Message:
Sent: 03-06-2019 02:29
From: Deepak Kumar
Subject: How to configure to block github upload?

Hi,
All screenshots are in your local language so I can't understand actually what is this. But getting idea based on the option you had choosing in the configuration.

I checked your screenshot as I can and got that you had blocked "github_file_upload" signature in the application control policy. Make it allow and check again.

------------------------------
Deepak Kumar
First Option General Trading LLC
Dubai

Original Message:
Sent: 03-06-2019 02:19
From: weiping yang
Subject: How to configure to block github upload?

cert
app control
policytest

My configuration is as shown above, but there are problems with the upload and download of github. What should I do?

------------------------------
weiping [LastName] [Designation]
network engineer
[CompanyName]
[City] [State]
[Phone]
------------------------------
Deepak Kumar First Option General Trading LLC Dubai
Deepak Kumar First Option General Trading LLC Dubai