File filter blocks exe files

[tuan2tech]

Hi you

I'm using FG v7.4.3, I created a file filter to block downloading of .exe files, but users can still download the .exe file, specifically the Chrome installation file, specifically its file is ChromeSetup.exe

[AEK · Accepted solution]

Hi @tuan2tech 

If you are downloading from HTTPS server then you to setup SSL deep inspection in your firewall policy otherwise the file filter profile will not work.

If you download from HTTP site then the file filter will work without enabling deep inspection.

[abarushka]

Hello,

I would recommend to check whether deep inspection is enabled if applicable.

Moreover, I would recommend to check whether the issue persists after disabling QUIC protocol/switching firewall policy to flow.

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/984075/blocking-quic-manuall...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-QUIC-Protocol/ta-p/197661