Bloqueio de arquivos por extensão no whatsapp

[felipesalame1]

I'm having difficulty blocking the sending and receiving of files on WhatsApp by extension such as .pdv, .doc and .xlsx

[DPadula]

Hi Felipe

Could you explain what you have done on your FGT? How is the firewall rule configured?

[felipesalame1]

Create a single-host rule to test and enable application control, file filter, and SSL inspection security profiles.

In the control app I added the signatures of "Whatsapp_Web.File.Download", and "Whatsapp_Web.File.Upload" in monitor mode and also tested in block.

In File Filter, I indicated the types of files I want to block: "msoffice", "pdf" and "msofficex".

No SSL inspection uses the profile: "deep inspection".

The rule is in Proxy-based

I wanted to block only office files, PDFs and images, however, in these settings it ends up blocking everything including audio.

[DPadula]

Hi Felipe,

You don't need the file filter for that, also quic protocol must be blocked. We have an article that describe the procedure. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-WhatsApp-file-uploads-action-by-usin...

Remove the file filter from the firewall rule and confirm that it is similar to the article. Give it a try and update us.

[felipesalame]

Okay but I want to block only some file extensions like .doc .pdf and .xlsx
I've already tested this configuration but it blocks everything including audio

[DPadula]

If you can share the firewall rule settings we can check it. In case you cannot share it here, raise a case to Fortinet TAC Brazil and they will check it for you. 

[felipesalame1]

This is current policy