Block file sharing via SMB and FTP/SFTP app

[shrisivakumaran]

Need help to block file sharing via SMB in Mac only allowed Mac need to copy file in same network.
also want to block FTP/SFTP file share and allow only particular ip.

[AJPinto]

This is not something Jamf Pro can do as this ask falls well outside of the domain of device management, and is a Security need. Look in to DLP and Network security tools like Forcepoint, Netscape, Sentinel One and Zscaler; all of these tools can do what you are asking.

[shrisivakumaran]

We already have Zscaler in our org, can you give me any idea or doc how to achieve this in zscaler.

[AJPinto]

I recommend taking that ask to Zscaler's community board or opening a case with Zscaler as it's a bit out of band for Jamf Nation. Googling "block SFTP and FTP with zscaler" brings up this page which seems relevant and may get you started. 

For DMG's you either would want to block them on the download with Zscaler or use a DLP tool to prevent them from mounting. 

[jeetendragupta]

https://help.zscaler.com/zia/configuring-ftp-control-policy

[efil4xiN]

You may also want to look at macOS Native Firewall 

[mattjerome]

macOS sequoia brought back external drive and dmg mounting. May want to look in that direction

[shrisivakumaran]

Thanks everyone will check it out.