Block all downloads of executable files

[aniuk]

Hi

i would like to realize the following.

1. Block all downloads of executable files.

2. Have a whitelist of domains, where downloading is allowed.

We used to have this with FortiOS 4, but im not able to realize it with FortiOS 5. 

Can someone help me or are there tutorials for this?

Thanks Dominik

[Mark_Oakton]

have you tried a dlp profile with quarantine of all file types in the list?

[aniuk]

Hi Mark

Thank you for your help. Yes that is what i tried. Such a DLP sensor blocks all downloads perfectly. But i'm not able to make a policy with the exeptions. Exceptions work only with the ip-addresses and not with FQDN. And as we know  ip-addresses change frequently.