cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
thanhnc
Level 7
Report Inappropriate Content
Message 1 of 5

Webgateway - How to terminate large file download session?

Situation:

- The /opt is 39GB

- 10 user downloading with file size over 5GB from google drive

- The file is caching for Alti-malware scan

Because files are storing on google drive, we can not know their sizes to bypass Alti-malware scan

I want to know there is a way to terminate downloading session.

4 Replies
smasnizk
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Webgateway - How to terminate large file download session?

Termination of running sessions aren't possible. Please keep in mind that bypass on file.size will still take effect on big files even if file size is not provided in HTTP headers. The engine will download the limited size and then skip it from scanning as the size has been exceeded. When this rule isn't working, please create rule engine trace and feedback file before you fill new service request with tech. support for review.

-Sergej

Best Regards,
Sergej


If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Re: Webgateway - How to terminate large file download session?

I'm a little surprised. 

I've watched rule traces accumulating hundreds of cycles, even to the limit (500 I think).  Maybe this only happens for trickling or a progress page (with the opener enabled), which is what's needed for the antimalware scanner, and that's were it would be valuable. 

I'm tempted to hack at this to see if it's really true.  What one would hope is that file.size increases for each of those cycles.  Maybe it doesn't; maybe it can be used like that in a rule.  I wonder.

thanhnc
Level 7
Report Inappropriate Content
Message 4 of 5

Re: Webgateway - How to terminate large file download session?

Dear Sergej

Can use give me an example about file.size rule.

I use 7.6.2.9.0 and can not find the file.size property.

sbluemel
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 5

Re: Webgateway - How to terminate large file download session?

Hi,

You can use such sample:

Name:

Skip Files from Scanning over 50 MB

Comment:

Rule Criteria:

Connection.Protocol does not equal "FTP" AND

Cycle.Name equals "Response" AND

Body.Size greater than 52428800 OR (

Header.Exists ("Content-Length") equals true AND

String.ToNumber (Header.Get ("Content-Length")) greater than 52428800)

Action:

Stop Cycle

Regards,

Stefan

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community