FortiGate 7.2.13 File Filter

hi,

if you are downloading/uploading zip files on secure websites/HTTPS you would need to do deep packet inspection/DPI in order to make it work

https://community.fortinet.com/t5/FortiGate/Technical-Tip-File-Filter-not-detecting-blocking-files-sent-via/ta-p/363407 

Blocking specific file types like .zip in FortiOS 7.2.13 is a common task, but it often fails because the FortiGate cannot "see" inside the encrypted traffic (HTTPS) where the download is happening.

To fix this for your school project, you need to ensure three specific things are configured correctly in the GUI.

1. Use "Deep Inspection" (The Most Common Miss)

If you are downloading a .zip file from an HTTPS website (which is almost all of them), the FortiGate only sees encrypted data. It cannot identify the file type without decrypting it.

• Go to Policy & Objects > Firewall Policy.

• Edit the policy that allows your internet traffic.

   

   

• Under Security Profiles, look at SSL Inspection.