Technical Tip: How to add ZIP files or other file types to a Content Profile in FortiMail

[adavila]

Description

This article explains how zip files or files with other extensions can be used.

By default, FortiMail has content profiles for the following file extensions *.bat, *.com, *.dll, *.exe, *.scr, *.vb? and *.pif.

Scope

FortiMail.

Solution

A zip file extension (or any another file extension) can be added to a content profile as follows:

1. Go to Profile -> Content:

2. Select the File Filter tab and then select New:

3. In File Filter Profile, configure the following:

• Domain: The domain to which this filter is to be applied (or System for all domains).
• Name: The name that will have this profile (for example, Zip&Frt-files).
• Comment: Comments or description about this profile.

4. Go to File Extension and in the Predefined column, select *.zip (other predefined file extensions can be searched in Search box). Then, select the >> button to set it as Selected:

If other file extensions that are not in the Predefined list, it's possible to create them in User defined box. In this case, format should be configured as *.extension (for example, *.frt); then select the >> bottom to set it as Selected:

5. To save the File Filter Profile, select Create. The new file profile will be shown in the File Profiles list:

6. To configure the File filter in a content profile, go to Profile -> Content -> Content, select the Content profile which will have the file filter, and select Edit:

7. In Content Profile, go to Attachment Scan Rules and select New:

8. In the Attachment Scan Rules window, go to File Filter -> Available column, find and select the file profile created before, then select the >> button. If a specific action is required when these files extensions are scanned, select the Action box and choose the requested action. 

When the file profile is in the Selected column and the Action is configured, select Create:

8. In the Content Profile window, check that the new File Filter profile is configured in the Attachment Scan Rules, and select OK:

Finally, the Content profile with the configured File Filter Profile should be configured in an IP Policy or a Recipient Policy to ensure file filtering works.

Related article:

Technical Tip: How to bypass antivirus and content filter check for specific senders