F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

GBurch's avatar
GBurch
Icon for Altostratus rankAltostratus
Oct 17, 2018

Allow downloads but not uploads from Online Storage (Google Drive)

We currently use a BIG-IP 7250 as a forward web proxy. I've had a request from high up the management chain to allow downloads a specific 3rd Parties Google Drive space, but not allow uploads. We b...
cloud
filtering
Secure Web Gateway
swg
uploads
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Oct 17, 2018

That is a very common scenario and I took a look at the SWG. Turns out that Traffic Intelligence is extremely limited. In the Traffic Intelligence policy you can only drop, reject or log the request.

 

Are you using an explicit or transparent proxy mode?

 

As far as I can see, you're stuck with building an iRule for it. But this also means you are forced to intercept and de-crypt the SSL session in order to see the payload and request to google. When you know how the upload works you will be able to match against it in the iRule and drop the requests.