Guides
ProductDeveloperPartnerPersonal

Manage Advanced App Controls

An application listed in an application setting or Web policy rule may include advanced app controls. If an application has advanced app controls, you can configure certain actions for the application: block the application, block the application from uploading content, block the application from downloading content, block the application from both uploading and downloading content, or block the app from deleting content.

Table of Contents

Prerequisites

Control Apps in the Policy Application Settings

  1. Navigate to Policies > Policy Components > Application Settings.
1167
  1. Select an application list setting to edit or click Add to create a new application setting.
  2. Select Web Policy.
    To manage an application with advanced app controls, you must add the application list to a Web policy.
413
  1. Search for one of the apps with Advanced App Control.
  2. Click the checkbox for the app to block the application.
    In addition, apps with advanced app controls can block specific content:
    • Block the application from uploading content
    • Block the application from downloading content
    • Block the application from posting or sharing content
    • Block the application from deleting content
  1. Click Save.

Control Apps in a Web Policy Rule

To manage Advanced App Controls for an app, you must enable HTTPS Inspection for the Web policy. For more information, see Manage the Web Policy.

  1. Navigate to Policies > Web Policy and click Add or expand an existing ruleset.
1135
  1. Click Add Rule or Edit Rule.
1428
  1. Click Add Destination or Edit Destination, click Application Settings, and then choose an application list setting.
329
  1. Search for one of the apps with advanced app controls. (The screenshot in the following step shows a search for Dropbox.)
  2. Click the checkbox of the app to block all content for the app.
    To block only specific actions, click the checkbox next to one or all of the advanced control options:
    • Block the application from uploading content
    • Block the application from downloading content
    • Block the application from posting or sharing content
    • Block the application from deleting content
  3. Click Save to apply the changes to the rule.

Apps with Advanced App Controls

If apps have advanced app controls, you can block all content for the app, block the app from uploading content including posts and shares, block the app from downloading content, or block the app from deleting content.

Note: Advanced controls for these applications have no impact in “Allow,” “Warn,” or “Isolate” rules.

ApplicationsCategoryUploadDownloadPost/ShareDelete
Box Cloud StorageCloud StorageYesYesYesYes
DropboxCloud StorageYesYesYesYes
FlickrCloud StorageYes
File DropperCloud StorageYes
GrosFichiersCloud StorageYesYes
Google DriveCloud StorageYes
Leap FileCloud StorageYesYes
MediaFireCloud StorageYesYes
Microsoft OneDriveCloudStorageYes
OpenDriveCloud StorageYes
OnehubCloud StorageYes
PicDropCloud StorageYesYes
SendThisFileCloud StorageYesYes
SmugMugCloud StorageYesYesYes
SlideShareCloud StorageYesYesYes
4sharedCloud StorageYesYes
Cisco Webex TeamsCollaborationYes
Gyazo TeamsCollaborationYes
Microsoft TeamsCollaborationYesYes
SlackCollaborationYesYesYes
WhatsAppCollaborationYes*
Egnyte ConnectContent ManagementYes
LucidchartContent ManagementYes
PastebinContent ManagementYes
DailymotionMediaYes
GiphyMediaYes
VeohMediaYes
VimeoMediaYes
YouTubeMediaYes
BasecampOffice ProductivityYes
DocHubOffice ProductivityYes
AOL MailOffice ProductivityYes
EvernoteOffice ProductivityYes
GmailOffice ProductivityYes
for Gmail
attachment
uploads
Mail.ruOffice ProductivityYes
for Mail.ru
attachment
uploads
SmartsheetOffice ProductivityYes
TrelloOffice ProductivityYes
Yandex MailOffice ProductivityYes
for Yandex Mail
attachment
uploads
Yahoo MailOffice ProductivityYes
Citrix ShareFileP2PYes
FilesendP2PYes
GigaFileP2PYes
HightailP2PYes
WeTransferP2PYesYes
WikisendP2PYes
FacebookSocial NetworkingYes
Facebook MessengerSocial NetworkingYes
LinkedInSocial NetworkingYesYesYes
InstagramSocial NetworkingYesYes
PinterestSocial NetworkingYesYes
Tik TokSocial NetworkingYesYes
TwitterSocial NetworkingYesYes

*NOTE: If you upload a Whatsapp file that has already been previously uploaded, the upload will not be blocked. As a workaround, manually delete the pre-existing version of the file from the Whatsapp servers.

Troubleshooting

If advanced app control is not working as expected, check the following:

  • Application settings are configured in the required Web policy. You can check your Web policy by visiting http://policy-debug.checkumbrella.com.
  • HTTPS Inspection is enabled in the Web policy. Advanced app control only works if HTTPS inspection is enabled. See Add a Ruleset to the Web Policy.
  • The domain is not exempt from HTTPS inspection. Expand the Web policy and click Edit below HTTPS Inspection.
  • The domain—for example, dropbox.com—is not listed in Configuration > Domain Management > External Domains & IPs. Any domains or IPs on this list bypass the secure web gateway and route to your local resolver. This list applies to PAC file and AnyConnect deployments.
  • SWG must be enabled. The intelligent proxy is not supported.
  • Error condition when managing Advanced App Controls for the Pastebin app. Contact Umbrella support.

When an application is blocked, the Umbrella block page is not displayed. Instead, an in-app error message is shown.
If you need to raise a support case, contact Umbrella Support with the following details:

  • The output of http://policy-debug.checkumbrella.com.
  • The expected policy and identity, for example: network name or SAML user.
  • The expected outcome and application setting, for example: block uploads to Dropbox.

Application Categories < Manage Advanced App Controls > Manage Tenant Controls