How to block Dropbox, Google Drive and Microsoft OneDrive in CPL

Products

• ProxySG Software - SGOS

Issue/Introduction

Online storage services are accessible through browsers (such as Internet Explorer, Firefox) and software applications (desktop software, mobile apps). They may or may not have similar server destination points and authentication methods. In general, denying the landing URL (such as www.dropbox.com, www.onedrive.com, www.googledrive.com) would only block access to these online storage services; desktop software and mobile apps may or may not have different mechanisms.

 

Resolution

Workaround

This workaround describes how to find out more about the destination IP addresses, server URL, or hosts for the application, so you can add to the list in policy.

Note: Perform a packet capture while reproducing access from the mobile device to determine where the application tries to connect to. Then, use the following Test CPL, updating the addresses, URLs, or hosts as necessary.

;###### Test CPL ########
;MC > Configuration > Policy > Policy Files > Install Local files from : Text editor

;###### Google Drive ########
define condition "__CondList1googledrive"
url.domain="drive.google.com"
url.address=74.125.239.0/24
end condition "__CondList1googledrive"

define condition "GoogleDrive"
condition="__CondList1googledrive"
end condition "GoogleDrive"

<Proxy>
condition="Googledrive" Deny


;###### One Drive ########

define condition "__CondList1onedrive"
url.domain="onedrive.com"
url.address=23.2.83.26
end condition "__CondList1onedrive"
define condition "OneDrive"
condition="__CondList1onedrive"
end condition "OneDrive"

<Proxy>
condition="OneDrive" Deny


;###### Dropbox ########
define condition "__CondList1dropbox"
url.domain="dropbox.com"
url.address=108.160.166.62
end condition "__CondList1dropbox"
define condition "Dropbox"
condition="__CondList1dropbox"
end condition "Dropbox

<Proxy>
condition="Dropbox" Deny


;###### End Test CPL ########