Failed to upload/install splunk app from file

[nsxlogging]

Hi team,

Today, we found an error was thrown when we tried to upload splunk app from file (The file is downoaded from https://classic.splunkbase.splunk.com/app/4241/)

Here is the error:

"
File Transfer Blocked

The file you are trying to download or upload has been blocked in accordance with company policy. Please contact your system administrator if you believe this is an error.

"

However, it works fine if upload from this UI:

The file is exactly the same.. Why i cannot upload from file?

We have tried with Splunk 8.2.7 and Splunk 9.2.1. We are pretty sure everything works fine before(~6 month ago) 

Could you please help here? thank you!

[kiran_panchavat]

@nsxlogging  

Your company’s security policy may be blocking the download of the Splunk app or add-on from Splunkbase to resolve this, forward the error to your IT/security team so they can check firewall/proxy logs, verify if Splunkbase or specific file types are restricted, and whitelist them if justified, or try downloading from a different network (if permitted) or a non-corporate device and transfer via approved methods.

[gcusello]

Hi @nsxlogging ,

the issue isn't in Splunk, but in the firewall policies of your Company as descripted in the message error "The file you are trying to download or upload has been blocked in accordance with company policy".

To solve this you have to contact your firewall administrator, if it worked fins six months ago, surely something changed in your company firewall rules.

Instead it runs directly downloading from Splunkbase because, your Splunk Server can access it and the firewall routes are open for it.

Ciao.

Giuseppe