Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 27 subscribers
  • Views 5035 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocking File Extensions

iSparky Systems

Good Morning Everyone

Would love some guidance (will buy bread)

We're in the process of migrating from UTM to XG - everything setup from scratch for a better understanding of whatever the future may bring. After spending much time on the forums our hick-up below persists. 

I'm attempting to block a whole list of file extensions from being downloaded irrelevant of the source website.

 

Step 1 - Web -> Filetypes = add all the extensions I want to be blocked to a new group called Blocked Extensions

Step 2 - Web -> User Activities = add Activity Blocked Downloads containing Blocked Extentions

Step 3 - Web -> Policies = edit Default Workplace Policy = Add Blocked Downloads right to the top of the policy.

 

With or without SSL Scanning on the result remains the same.

Testing with TeamViewer website to download and the exe still downloads. What am I not understanding about the process?

 



This thread was automatically locked due to age.
Parents
  • +1

    Hi  

    Could you please let us know where you have applied for the web filter protection, on the user profile or the firewall rule?

    Did you apply the HTTPS scanning in the firewall rule from where the traffic is passing?

    I would recommend you to create a test firewall rule for a single test system and set that IP host as source network for that firewall rule and apply scanning and restrictions as per your requirement and check from that test machine.

Reply
  • +1

    Hi  

    Could you please let us know where you have applied for the web filter protection, on the user profile or the firewall rule?

    Did you apply the HTTPS scanning in the firewall rule from where the traffic is passing?

    I would recommend you to create a test firewall rule for a single test system and set that IP host as source network for that firewall rule and apply scanning and restrictions as per your requirement and check from that test machine.

Children
No Data