Asked by:
Block File transfer for federated users and allowing it for internal users in Skype for Business 2015 (on-premise)

Question
-
Hi There,
We are using Skype for Business 2015 & we have federation with our customers & vendors. We have mandate to block file transfer for federated users in IM and also in conference calls.
I have checked the file transfer option under IM & Presence which either Enable or Disable, if we disable it will disable for internal users as well.
I have read the few article e.g https://blogs.perficient.com/2013/12/11/disabling-edge-server-file-transfers-in-lync/ but it looks like it blocks for internal users as well
In Lync 2013, to block all file transfers on the edge server you would use the following command:
http://technet.microsoft.com/en-us/library/gg425897.aspx
new-csfiletransferfilterconfiguration -identity edgeserver:pia-ls2013-ed01.widgets.com -action blockall -enabled $trueCan you guys please suggest how to achieve this requirementThank for the help
Thursday, July 12, 2018 2:21 PM
All replies
-
Hi,
Look at this link: https://techcommunity.microsoft.com/t5/Skype-for-Business-Blog/Update-on-Custom-Policies-in-Skype-for-Business-Online/ba-p/69850
It is for Online SFB but this command should work:
New-CsExternalUserCommunicationPolicy -Identity BlockExternalFT -EnableP2PFileTransfer $False
https://docs.microsoft.com/en-us/skypeforbusiness/set-up-policies-in-your-organization/block-point-to-point-file-transfers
Thursday, July 12, 2018 4:39 PM -
Hi Praveen,
This function can not be achieved in on-premise environment, if you want to blocked file share, you just block this function for all edge file transfer include internal to external file transfer as you descripted.
In addition, this function now can achieve in the online environment, you could refer to the Article Marko provided:
https://techcommunity.microsoft.com/t5/Skype-for-Business-Blog/Update-on-Custom-Policies-in-Skype-for-Business-Online/ba-p/69850
Best Regard,
Evan- Proposed as answer by woshixiaobai Monday, July 16, 2018 2:30 AM
Monday, July 16, 2018 2:17 AM -
Hi Praveen,
Is there any update for this issue, if the reply is helpful to you, please try to mark it as an answer, it will help others who has the similar issue.
Best Regard,
Evan
Wednesday, July 18, 2018 5:42 AM -
Hi Praveen,
Is there any update for this issue, if the reply is helpful to you, please try to mark it as an answer, it will help others who has the similar issue.
Best Regard,
Evan
Tuesday, July 24, 2018 6:25 AM -
Thanks for Support
We have created policy under IM & Presence which can be applied only to edge server. This blocks File transfer to Federated users, down side of this policy if any users login to Skype from external network then it will get authenticated against edge server & it block file transfer for him as well & for mobile devices as well which we think as advantage itself
Saturday, August 11, 2018 10:08 PM -
FYI - that option you have chosen it will block file transfer between your external user and internal user.
the another option is try to use MSPL script to disable file transfer only to federated partners
http://voipnorm.blogspot.com/2011/08/blocking-file-transfers-to-federated.html
MS will not support this option, try on your own risk.
Best Regards, Neeranjan
Sunday, August 12, 2018 7:18 PM -
Thanks Neeranjan
We have looked MSPL Script options & in SFB2015 MSPL scripts are not supported and I am not good with PS scripting. I have checked with couple of vendors as well they also didn't had experties
Thursday, August 16, 2018 6:57 PM -
Is there any update on this? We also need to implement the same?Thursday, February 21, 2019 7:07 AM