Will McAfee NSP be block Secret File Transfer Protocol ?

[abel_pan]

I set up secret file transfer protocol but connection fail .

Check all gateway device and NSP doesn't have any deny log . but i set NSP firewall policy to allow.

The SFTP can connect success.

McAfee NSP was default deny SFTP ?

[BitlifeAPP]

Yeah! I am Facing The Same Problem Since Last Three Days and I don't Know How to Fix It. If Anyone Can Help Me Then Please Share Some Solution to Solve it Out.

Hope to Here From You!

Thanks in Advance

Rakesh Chauhan

[fkazi04]

Is there any specific application you have in mind to be blocked? 

For example: if the user tries to transfer the file over DNS, the Sensor can block the initial connection with signature name like 'dns tunnelling'.

Regards,

Faizan

[abel_pan]

No, just set up a connection . 

This connection is using SFTP .

[fkazi04 · Accepted solution]

Most likely the Sensor won't be able to inspect the packet because the traffic will be encrypted.

However, you can take packet capture from the Manager and connect the application. If you can find packet details which are unencrypted, the Sensor should be able to see the connection alert if a signature is available.

Regards,

Faizan

[abel_pan]

Thank you for the information , 

The Secret File Transfer Protocol can use McAfee IPS info collector function to watch packet details ?

[fkazi04]

Info collector contains process information logs about the manager. Please see the following link to do a packet capture on the Manager.

https://docs.mcafee.com/bundle/network-security-platform-9.2.x-product-guide/page/GUID-FCE3657E-DF2A...

Regards,

Faizan