how to prevent large file from downloading only

i make DLP sensor and map it with a policy to prevent download files large than 500M after apply, user can not download small or large files

Best answer by CAD

activate (Block Oversized File/Email) in porxy option

New Member

Please provide the output of your sensor from the CLI:

config dlp sensor

    edit "Large-File"

        config filter

            edit 1

                set name "Large-File-Filter"

                set proto smtp pop3 imap http-get http-post mapi

                set filter-by file-size

                set file-size 51240

                set action log-only

            next

end

    next

end

https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-security-profiles/DLP/DLP%20examples.htm You can also watch to flows to get a better idea why it's failing: diagnose debug reset diagnose debug enable diagnose debug flow show console enable diagnose debug flow filter addr <source ip> diagnose debug flow trace start 100 To stop the debug: diagnose debug disable diagnose debug reset