locked
Block File transfer for federated users and allowing it for internal users in Skype for Business 2015 (on-premise) RRS feed

  • Question

  • Hi There,

    We are using Skype for Business 2015 & we have federation with our customers & vendors. We have mandate to block file transfer for federated users in IM and also in conference calls.

    I have checked the file transfer option under IM & Presence which either Enable or Disable, if we disable it will disable for internal users as well.

    I have read the few article e.g https://blogs.perficient.com/2013/12/11/disabling-edge-server-file-transfers-in-lync/ but it looks like it blocks for internal users as well

    In Lync 2013, to block all file transfers on the edge server you would use the following command:
    http://technet.microsoft.com/en-us/library/gg425897.aspx
    new-csfiletransferfilterconfiguration -identity edgeserver:pia-ls2013-ed01.widgets.com -action blockall -enabled $true

    Can you guys please suggest how to achieve this requirementThank for the help


    Thursday, July 12, 2018 2:21 PM

All replies

  • Hi,

    Look at this link: https://techcommunity.microsoft.com/t5/Skype-for-Business-Blog/Update-on-Custom-Policies-in-Skype-for-Business-Online/ba-p/69850

    It is for Online SFB but this command should work:

    New-CsExternalUserCommunicationPolicy -Identity BlockExternalFT -EnableP2PFileTransfer $False

    https://docs.microsoft.com/en-us/skypeforbusiness/set-up-policies-in-your-organization/block-point-to-point-file-transfers

    Thursday, July 12, 2018 4:39 PM
  • Hi Praveen,

    This function can not be achieved in on-premise environment, if you want to blocked file share, you just block this function for all edge file transfer include internal to external file transfer as you descripted.

    In addition, this function now can achieve in the online environment, you could refer to the Article Marko provided:
    https://techcommunity.microsoft.com/t5/Skype-for-Business-Blog/Update-on-Custom-Policies-in-Skype-for-Business-Online/ba-p/69850 

    Best Regard,
    Evan
    • Proposed as answer by woshixiaobai Monday, July 16, 2018 2:30 AM
    Monday, July 16, 2018 2:17 AM
  • Hi Praveen,

     

    Is there any update for this issue, if the reply is helpful to you, please try to mark it as an answer, it will help others who has the similar issue.

     

    Best Regard,

    Evan


    Wednesday, July 18, 2018 5:42 AM
  • Hi Praveen,

     

    Is there any update for this issue, if the reply is helpful to you, please try to mark it as an answer, it will help others who has the similar issue.

     

    Best Regard,

    Evan


    Tuesday, July 24, 2018 6:25 AM
  • Thanks for Support

    We have created policy under IM & Presence  which can be applied only to edge server. This blocks File transfer to Federated users, down side of this policy if any users login to Skype from external network then it will get authenticated against edge server & it block file transfer for him as well & for mobile devices as well which we think as advantage itself

    Saturday, August 11, 2018 10:08 PM
  • FYI - that option you have chosen it will block file transfer between your external user and internal user. 

    the another option is try to use MSPL script to disable file transfer only to federated partners

    http://voipnorm.blogspot.com/2011/08/blocking-file-transfers-to-federated.html

    MS will not support this option, try on your own risk.

    Best Regards, Neeranjan

    Sunday, August 12, 2018 7:18 PM
  • Thanks Neeranjan

    We have looked MSPL Script options & in SFB2015 MSPL scripts are not supported and I am not good with PS scripting. I have checked with couple of vendors as well they also didn't had experties

    Thursday, August 16, 2018 6:57 PM
  • Is there any update on this? We also need to implement the same? 
    Thursday, February 21, 2019 7:07 AM