How to block .zip file without blocking files office 2010?

[Saulo]

Good Morning. I own FortiGate 90D with firmware Version v5.2.3, build 670. I have a problem I can not block DLP * .zip, because it blocks Microsoft Office files (* .xlsx, * .docx). How do I block incoming emails with .zip extension without locking office extensions 2010?

Thank you!

[netmin]

This is a bit more difficult, since x-files such as docx, xlsx and pptx are structured zip files as well.

A potential workaround is a regex like this: ^PK\x03\x04(?!.{26}\[Content_Types\]\.xml)

...which triggers the PK-ZIP magic bytes "not followed by 'any' 26 bytes +  [Content_Types].xml" - when assuming that the first file inside the MS Office documents is always "[Content_Types].xml"

[Saulo]

Thank you for your help.

[CAD]

i facing same problem

try to block *.zip in different sensor(Separated sensor) Do not add him any extension , it will solve your issue.