Blocking File Extensions

Question

Good Morning Everyone 
 Would love some guidance (will buy bread) 
 We're in the process of migrating from UTM to XG - everything setup from scratch for a better understanding of whatever the future may bring. After spending much time on the forums our hick-up below persists. 
 I'm attempting to block a whole list of file extensions from being downloaded irrelevant of the source website. 
 
 Step 1 - Web -> Filetypes = add all the extensions I want to be blocked to a new group called Blocked Extensions 
 Step 2 - Web -> User Activities = add Activity Blocked Downloads containing Blocked Extentions 
 Step 3 - Web -> Policies = edit Default Workplace Policy = Add Blocked Downloads right to the top of the policy. 
 
 With or without SSL Scanning on the result remains the same. 
 Testing with TeamViewer website to download and the exe still downloads. What am I not understanding about the process?

Keyur · Accepted Answer

Hi iSparky Systems Could you please let us know where you have applied for the web filter protection, on the user profile or the firewall rule? Did you apply the HTTPS scanning in the firewall rule from where the traffic is passing? I would recommend you to create a test firewall rule for a single test system and set that IP host as source network for that firewall rule and apply scanning and restrictions as per your requirement and check from that test machine.