Skip to main content
ExSapo
New Member
March 6, 2014
Question

Block All files except PDF.

  • March 6, 2014
  • 5 replies
  • 12066 views
hi, there is a way to create a policy with DLP Sensors that block every files except a whitelist (example only allow pdf Files). Thank you. Ex

    5 replies

    TuncayBAS
    Explorer
    August 29, 2014
    Not with the DLP, the Webfilter as can be done with. In WebFilter (?! \.)(doc|docx|xls|xlsx)$ Would you please try using the expression block.
    hklb
    Visitor III
    August 29, 2014
    With webfilter, we will able to send a JPG file if the user rename the extension to .pdf.. I' m not an expert with DLP, but I think you need to configure first a dlp allow the extension you want allow (in this exemple .pdf) and a second the block all file. I' m not sure about my configuration, so try this in your lab ;)
    netmin
    New Member
    August 29, 2014
    As an example, this regular expression in a DLP block rule tests the first (magic) bytes of all files and blocks everything that does not appear to be a PDF:
    ^(?!\%PDF-1\.).*
    seadave
    New Member
    February 20, 2015

    This is something that is frustrating about 5.2.2 DLP.  You used to be able (in 4.3) to be able to create files that were either allowed or block.  Now it is only block.  Like most, we are blocking .EXEs and other file types but it is also being too aggressive and difficult for us to exempt particular files.  For instance (f.txt) files gziped from www.google.com.  I normally will add a domain to a rule without the DLP rule to allow downloads, but definitely can't do that with www.google.com.

    damianariel
    New Member
    February 24, 2018

    Hi all,

     

    I have created a rule allowing a site, but when i need to try donwload .pdf file this is blocked. Any suggestion?. There is not DLP sensor activated for this rule