Skip to main content
jjm1971
Visitor III
November 18, 2022
Solved

Block File Types

  • November 18, 2022
  • 2 replies
  • 4708 views

Hi

 

I have a requirement to block a range of file types, however quite a few of them aren't in the supported file type list in the file filter or for use with DLP filters.

 

For example, I need to block inf, jse, lnk, vbe, vbs extensions, but they are not in the supported list.  Is there any way I can block these file types?

 

Thanks

 

J

Best answer by Julien87

Hello J

 

i don’t use dlp fracture, but in this page à custom pattern could be créate 

can you try that?

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/919417/basic-dlp-filter-types 

2 replies

Julien87
Julien87Answer
Contributor II
November 19, 2022

Hello J

 

i don’t use dlp fracture, but in this page à custom pattern could be créate 

can you try that?

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/919417/basic-dlp-filter-types 

jjm1971
jjm1971Author
Visitor III
November 21, 2022

Thanks, I'll take a look at that, if it's possible to create custom file types then it should work.

Julien87
Contributor II
November 21, 2022

Hi J,

 

okay, can you reply, if it's fine after your trying?

 

Best regards,

 

Julien

jjm1971
jjm1971Author
Visitor III
November 21, 2022

What I've done is created a dlp filepattern to cover the file types that I need to block, then applied that to a dlp profile, which is then applied to the proxy policy.  It looks to be working as desired, will need to do more testing to confirm.  

 

I don't get a Fortigate DLP blocking page though, which I was expecting, but it is definitely blocking and logging the attempt.