Skip to main content
MarkosPantos
New Member
Nov 26, 2021 7:58 PM UTC
Solved

File filtering on HTTPS traffic? FortiOS 6.4.7

I can't seem to block users from downloading .ZIP files in my environment. I configured the file filter, and the logs show that it works well with detecting and blocking .ZIP files over HTTP, such as some antivirus definition updates.

This can't work for me as most online traffic is HTTPS and the file filter seems unable to detect when a .ZIP file is being downloaded over HTTPS.

Am I missing something with configuring the file filter to detect and block when a user is downloading a .ZIP file using HTTPS?

Is there another feature that I am supposed to use that I am missing?

 

kcheng
kchengAnswer
Staff & Editor
Nov 27, 2021 3:24 AM UTC

Hi,

 

Please consider changing your policy to proxy-based inspection if it is currently in flow-based inspection. Change the SSL inspection mode to deep-inspection to see if that works.

Administration Guide | FortiGate / FortiOS 7.0.1 | Fortinet Documentation Library

1 reply

kcheng
Staff & Editor
kchengAnswer
Staff & Editor
Nov 27, 2021 3:24 AM UTC

Hi,

 

Please consider changing your policy to proxy-based inspection if it is currently in flow-based inspection. Change the SSL inspection mode to deep-inspection to see if that works.

Administration Guide | FortiGate / FortiOS 7.0.1 | Fortinet Documentation Library

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT