File Filter

[radhevarma]

Hi all,

We have created file filter in FortiGate firewall but I want to prevent dounload .exe file

[Yurisk]

Blocking .exe files download is pretty trivial configuration in Fortigate EXCEPT for it to be effective you HAVE to enable Deep SSL Inspection as 99% web traffic (including file downloads) today are via HTTPS. Here is someone did video of how to configure the file filter itself, but again - main complexity is using Deep SSL inspection which is pre-requisite. Have you enabled Deep SSL inspeciton?

https://www.youtube.com/watch?v=mU92P0OUMGA

[radhevarma]

Yes I have enabled

[Yurisk]

Cool, then have a look at the video or read more here https://community.fortinet.com/t5/FortiGate/Technical-Tip-File-filter-exception/ta-p/240980 

[CarmeloMiller]

i have enabled