Block uploading behaviors

[Hieu]

Hi everyone,

I want to block my client's uploads (files, documents, images, etc.) to all applications and websites using Fortigate.

I'm using FortiOS 7.2.6 on a Fortigate 60F.

What should I configure to achieve this? Should I use Web Filter, Application Control, or adjust specific policies?

Any advice or detailed steps would be greatly appreciated.

Thank you!

[lkumar]

Hi Hieu,

You can block the file upload for the applications using the application control profile in the firewall policies.

Below is an article to block Upload on Google drive by using Application Profile
> https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-Upload-on-Google-drive-by-usi...

[Hieu]

Actually I have read many posts on the community page but still can't get the desired result. I have tried blocking google drive upload with application control but it doesn't work, I have disabled QUIC, installed deep inspection
My problem is that I want to block all upload traffic from LAN to the Internet, do you have any other ideas besides application control such as DLP, web filter, file filter. Hope to receive your help. Thank you!

[Shashwati]

hello,

Please refer to the following document regarding file filtering and  DLP and use the dlp sensor:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configure-Data-Leak-Loss-Prevention-DLP/ta...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-file-filtering/ta-p/197098

[salmas]

Hello @Hieu 

You can implement file filter with deep inspection enabled. Select the Traffic as "Outgoing" when creating file filter rule. This will block your file uploads for selected file types with any application or websites. 

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/984084/file-filter

[Hieu]

Thank you for your help. I has completed my job by combining security profiles together.