Forum Discussion
leosilvapaiola_
Apr 30, 2019Nimbostratus
APM + SWG: File extension Policy ???
Hello community,
We have a situation with a customer and a partner, where they were deploying APM + SWG as a forward proxy for navigation control and walk into a problem.
The policies based...
youssef1
May 01, 2019Cumulonimbus
SWG
The disallowed file types is only applied to the file type in the URI
Except error on my part SWG does not allow to block specific files extension in a native way. but as you know the proxy solution is a whole (LTM APM and SWG). you can use an irule or an LTM Policies that I think is more suitable
Using Irule with DG:
when HTTP_PROXY_REQUEST {
set path [HTTP::path]
}
when HTTP_PROXY_RESPONSE {
if { [HTTP::header value Content-Type] contains "png" and !([class match [string tolower $path] ends_with URI_EXTENSION]) } {
do some other stuff
}
}
Sans DG:
when HTTP_PROXY_RESPONSE {
switch -glob $path {
"*.js" -
"*.png" -
"*.jpg" -
"*.gif" {
do some other stuff
}
default {
do some other stuff
}
}
}
You can also use ICAP. Icap will also allow you to do antivirus scanning, check file types and much deeper analysis. it's the best solution from me (as bluecoat AV)...
regards
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects