Technical Tip: Explaining the different file types in DLP Profile in FortiGate

In the FortiGate DLP profile, there are two different types of file types:

1. Type.
2. Pattern.

1. Type is used to check the content of the file by scanning the file type.

The file type can be used only for available patterns on FortiGate.

Refer to the document below for the supported file list for the file types:

Supported file types

2. The pattern will check the file name pattern.

For example :

If the doc does not contain the valid archived content, then FortiGate will identify the filetype as filetype=unknown, so it will not be blocked.

At the same time, the file pattern scans the exact filename with the extension (*.doc), so it will get blocked.

Related article:
Technical Tip: What compression file formats does the FortiGate antivirus engine support