Block File uploads outside my virtual machine

Shaik Abdul Mannan 0

I want to Block the File Uploads from my Azure virtual machine to any other cloud storage or Emails. what are the possible ways to achieve this solution?

1 answer

Akshay kumar Mandha 2,185 Reputation points Microsoft Vendor

2025-01-08T18:30:30.5466667+00:00

Hi Shaik Abdul Mannan,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here
Based on your query,
Block the File Uploads from my Azure virtual machine to any other cloud storage or Emails need to do ports block in the NSG outbound should be deny for VM. By blocking these ports like 25, 587, and 465 will prevent users from sending emails, especially with attachments. These ports are used for various email protocols, with 25 being for standard SMTP, 587 for encrypted email submission using STARTTLS, and 465 for secure email submission using SSL. If you block port 80, users won't be able to upload files over unsecured web connections, while blocking port 443 will stop file uploads over secure HTTPS connections. Additionally, blocking port 445, which is used for SMB file sharing, will prevent users from transferring files to shared network drives.

For port use case please refer below documents
Port and protocol requirements for servers
SMTP
SMTP with STARTTLS

Note: - Before making any changes or setting things up, please make sure backup and all configuration

If I have understood your requirement correctly, if not please let me know. If you have any further queries, feel free to ask, and I will assist you as needed!

If you found this information helpful, please click an accepting the answer and 👍"Upvote" on my post for other community member's reference
Please sign in to rate this answer.
Akshay kumar Mandha 2,185 Reputation points Microsoft Vendor

2025-01-09T17:39:14.42+00:00

Hi Shaik Abdul Mannan,
If you get chance, please review my solution let me know if you have any question, please tag me in comment. I will help you as you needed.!
Thank you.!

Shaik Abdul Mannan 0 Reputation points

2025-01-09T18:14:42.65+00:00

Hi Akshay kumar Mandha thank you for responding to above query , but my requirement is to allow internet access on the Virtual machine & Block only file uploads to any cloud strorage or attachments.

Akshay kumar Mandha 2,185 Reputation points Microsoft Vendor

2025-01-09T21:45:25.0666667+00:00

Hi Shaik Abdul Mannan,
Thank you for replying back to us.
For any cloud storage restrict files One approach is to use Data Loss Prevention (DLP) policies with Microsoft Defender for Endpoint. These policies can be set up to block file uploads based on the type of content or the file size. Once these policies are configured, block the sharing without the override option
Protective actions of DLP policies
For Learn about data loss prevention
Or
Particularly block any cloud storage file upload we need go with some third-party tools or any application policy need to use
Or
Else use domain and port blocking for particular website by creating outbound rule as I said previously

these are strategies on latest comment might help's you

Please let me know if you need any additional information feel free to ask me. I always happy to help you.!

Shaik Abdul Mannan 0 Reputation points

2025-01-10T05:30:59.87+00:00

Hi @Akshay kumar Mandha Thanks for you response, i have confusion between defender for cloud apps, defender for endpoint & Microsoft Purview.

what do I require to achieve this with
Microsoft Purview ?
Microsoft Purview with Defender for endpoint or Cloud apps ?

what is the minimum license requirements to achieve this , & I want to Implement this in easier way possible since On NSG we cannot White list URL's, if we go with the Firewall we need to either BLock or Allow the Domain . that doesnt meet our requirement.

while Accessing the web , emails we want to restrict file uploads.

Akshay kumar Mandha 2,185 Reputation points Microsoft Vendor

2025-01-10T20:29:32.1366667+00:00

Hi Shaik Abdul Mannan,
As per your comment here below the explanation
Microsoft Purview Purpose
Microsoft Purview (formerly known as Azure Purview) is a data governance and compliance solution. It helps organizations manage, protect, and govern their data across various environments1.
Use Case Ideal for organizations that need to classify, label, and protect sensitive data, ensuring compliance with data protection regulations. It's great for managing data across cloud services, on-premises systems, and hybrid environments.
Learn about Microsoft Purview

Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is primarily managed through a web-based portal rather than a standalone app
Microsoft Defender for Endpoint

Purpose: Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is an endpoint security platform. It provides threat and vulnerability management, attack surface reduction, and endpoint detection and response (EDR)2.

Use Case: Perfect for organizations looking to secure their devices (Windows, macOS, Linux, Android, iOS) against advanced threats. It's ideal for IT teams that need to monitor and respond to security incidents on endpoints.

And some of user also same asking kind query they are trying block file uploads
please refer this below blog it might help get an idea on this
Blocking file uploads to all sites, unless safelisted

To match exact requirement easiest way means possible by any third party might help you

Please let me know. if you have any further queries tag me in comment, I'm happy to assist you.!

Akshay kumar Mandha 2,185 Reputation points Microsoft Vendor

2025-01-13T19:28:31.3766667+00:00

Hi Shaik Abdul Mannan,
Any update on previous response please let me know tag me if you need additional information will help you.!
If you found this helpful, feel free to accept the answer and upvote my post so others can benefit. This way, those who searching for the same information can follow these steps and reach a conclusion before taking action.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Block File uploads outside my virtual machine

1 answer

Your answer