Block File Types

[jjm1971]

Hi

I have a requirement to block a range of file types, however quite a few of them aren't in the supported file type list in the file filter or for use with DLP filters.

For example, I need to block inf, jse, lnk, vbe, vbs extensions, but they are not in the supported list.  Is there any way I can block these file types?

Thanks

J

[Julien87 · Accepted solution]

Hello J

i don’t use dlp fracture, but in this page à custom pattern could be créate 

can you try that?

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/919417/basic-dlp-filter-types 

[jjm1971]

Thanks, I'll take a look at that, if it's possible to create custom file types then it should work.

[Julien87]

Hi J,

okay, can you reply, if it's fine after your trying?

Best regards,

Julien

[jjm1971]

What I've done is created a dlp filepattern to cover the file types that I need to block, then applied that to a dlp profile, which is then applied to the proxy policy.  It looks to be working as desired, will need to do more testing to confirm.  

I don't get a Fortigate DLP blocking page though, which I was expecting, but it is definitely blocking and logging the attempt.

[jjm1971]

Re the blocking page, I do get it sometimes, but not all the time