File Download Exceptions

[kramer11]

Hi all,

We currently have an IPS profile for Internet bound traffic (only certificate inspection, not deep ssl), and we block file sharing sites like OneDrive, Google Drive, etc.

But we’re always getting requests in scenarios where users are on vendor based websites or vendor based portals and those sites are using Google drive or OneDrive on the backend to host their files, and they’re getting blocked. Also get a ton of wetransfer link download request from actual legitimate partners and vendors which is wild bc some of it deals with legal.

Curious how you curtail these types of requests as I’m doing it the old fashion way which is super time consuming (once approved, open the access over a phone call, download, and then lock it back up).  Even the wetransfer links are not easy unless we did deep ssl inspection and whitelisted the full url via a web filter profile, and even then, time consuming as each request would represent a new profile.

Would love to hear how others are handling these exception requests.

Thanks!

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[pavankr5]

Dear @kramer11 

You can use the FortiGuard Web Filter overrides feature to allow specific users access to blocked URLs for a defined period. This allows you to grant temporary access to vendor-based websites or portals using file-sharing services like Google Drive or OneDrive without compromising security

Thanks
pavan