Can't block executable files

Just want to add i tried to access executable file in the sophos test

Can anyone tell me if i am missing something. Thanks

Hi,

please add the enable IPS setting in your ru le.

Also which rules is allowing the traffic through.

Ian

I already applied lantowan_strict in the IPS still only google chrome executable file is being blocked.

As you can see in the 2nd photo executable file is being download.

I already open a support case in this issue/concern. Anything you can suggest?

I also tried using other browser the result is the same only chrome executable file is being blocked.

I already applied lantowan_strict in the IPS still only google chrome executable file is being blocked.

As you can see in the 2nd photo executable file is being download.

I already open a support case in this issue/concern. Anything you can suggest?

I also tried using other browser the result is the same only chrome executable file is being blocked.

Hi,

which firewall rule is allowing the traffic through?

Please post a screenshot of the offending firewall rule.

Ian

I only have one firewall rule created.

Hi,

with that firewall rule you block could be bypassed by an application that is smart enough to get around https scanning.

Please post a copy of the logviewer file showing the details when a file is passed through.

Ian

Do you know what logviewer file could i see that? I don't see it in the web filter logs. There's no executable file logs in there.

Also i also block advertisements in the web policy.

In the logs it says blocked, but ads is still showing in every website that i browse.

Hi,

first thing is change the firewall rule services to http and https.

Next is to block QUIC.

CHange the Application to allow.

Logviewer will show somethings in firewall, application (maybe), WEB.

Finally you will not be able to block all ads, some are embedded in the displayed page and only show as ads if you click on them.

Ian

edited spelling error.

I tried other browser firefox and microsoft edge. and i was able to block most of the executable file.

But in chrome most of executable file can't block. When i apply decrypt and scan https.

Most executable file is being blocked and also advertisements. Thanks for the information rfcat_vk 

I was able to locate what needs to be applied.

I think this is enough for now. Thanks a lot.