Security

Expand all | Collapse all

Juniper SRX300 - Block file transfer app WhatsApp browser

  • 1.  Juniper SRX300 - Block file transfer app WhatsApp browser

    Posted 30 days ago
    Hello everyone, everything good ? I have a problem and I need help. I need to allow access to the whatsapp web application or via browser. However, I need to block the file transfer. Users will only exchange messages. Today I have the Juniper SRX300 is it possible?

    ------------------------------
    Leandro Gomes
    ------------------------------


  • 2.  RE: Juniper SRX300 - Block file transfer app WhatsApp browser

    Posted 28 days ago
    Only way to do this would be to do ssl forward proxy and do you own manual AppID signatures to differentiate Whatapp messages or file transfers.

    Doing ssl forward-proxy has many complications with importing the SRX's trusted root CA so the firewall can look at the content of the traffic. Secondly there is the massive performance impact. My best guess is that a SRX300 can handle no more than 10 Mbps of SSL/TLS encapsulation before running out of available CPU ressources.

    ..and then come you have to manually do an AppID signature to block file transfers (meaning you need to analyze the datastream and figure out what you should trigger on). That is a task for itself on top.

    So - basically: I don't see any feasible way of doing this on a SRX300, except if you block whatsapp completely via AppID.

    ------------------------------
    JONAS HAUGE KLINGENBERG
    ------------------------------



  • 3.  RE: Juniper SRX300 - Block file transfer app WhatsApp browser

    Posted 27 days ago
    Hi Jonas, how are you? I understand your argument, thank you very much for your help. As your guidance I will leave you blocked completely. Thank you very much.

    ------------------------------
    Leandro Gomes
    ------------------------------



  • 4.  RE: Juniper SRX300 - Block file transfer app WhatsApp browser

    Posted 6 days ago
    Hi Leandro,

    We're in the process of adding granular WhatsApp support as micro-applications in a coming signature pack. Once these are available, you will be able to block file-transfers within WhatsApp while leaving voice/video/chat alone.

    Stay tuned,

    ------------------------------
    Craig Dods
    ------------------------------