Block Transfer file via IAP

[daniloleonardo]

Hi,

is it possible to block transfer file via IAP?

I have many windows machines, I want that my users can connect through IAP, but I want to block transfer file.

Is it possible?

Thanks.

[diannemcm]

Hi @daniloleonardo,

Welcome to Google Cloud Community!

RDP supports clipboard and file redirection, which can be used to transfer files. IAP tunnels the RDP connection securely. Blocking file transfers via Identity-Aware Proxy (IAP) for Windows machines is not directly supported by IAP itself, you can achieve your goal by applying configurations on the Windows VMs themselves. 

IAP connection - To let you connect to your VM instances, IAP Desktop must interact with Google Cloud APIs. You can configure IAP Desktop to access Google Cloud APIs via the public internet or through hybrid connectivity. See Connect to Google Cloud and IAP Desktop.

Blocking File transfer - Managing IAP Desktop using group policies - You can use a group policy object (GPO) to configure policies for IAP Desktop. Group policies take precedence over user settings: When you configure a group policy for a certain setting, users aren't allowed to change the respective setting. 

• To disallow clipboard sharing or restrict the usage of other Remote Desktop features, configure group policies  on the target VM instance. You can configure these policies either by using the Local Group Policy Editor or by using Active Directory to apply a group policy. 
• Check DoNotAllowDriveRedirection for reference.

Also, sharing with you this conversation on serverfault on how to block Filetransfer through RDP.

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.