Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Saulo
New Contributor

How to block .zip file without blocking files office 2010?

Good Morning. I own FortiGate 90D with firmware Version v5.2.3, build 670. I have a problem I can not block DLP * .zip, because it blocks Microsoft Office files (* .xlsx, * .docx). How do I block incoming emails with .zip extension without locking office extensions 2010?

 

Thank you!

3 REPLIES 3
netmin
Contributor II

This is a bit more difficult, since x-files such as docx, xlsx and pptx are structured zip files as well.

 

A potential workaround is a regex like this: ^PK\x03\x04(?!.{26}\[Content_Types\]\.xml)

 

...which triggers the PK-ZIP magic bytes "not followed by 'any' 26 bytes +  [Content_Types].xml" - when assuming that the first file inside the MS Office documents is always "[Content_Types].xml"

Saulo
New Contributor

Thank you for your help.

CAD

i facing same problem

try to block *.zip in different sensor(Separated sensor) Do not add him any extension , it will solve your issue.

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors