topic Re: Downloadable application lock by SmartEndpoint policies. in Endpoint

Downloadable application lock by SmartEndpoint policies.

Diego_Carreno — Fri, 05 Apr 2019 15:29:03 GMT

Hi all,

Currently I have the following scenario:

I need to block a downloadable application through policies of Smartendpoint and its client.

It is possible to customize such blocking, that is, a "test.exe" program can not be downloaded by a user.

Thank you very much for your attention!

Re: Downloadable application lock by SmartEndpoint policies.

PhoneBoy — Sat, 06 Apr 2019 21:44:17 GMT

On SmartEndpoint you should be able to prevent the application from running by using Application Control.
To prevent downloading, it's possible URL Filtering might be able to do it, but not sure.
A gateway running Anti-virus blade could do it (possibly requiring HTTPS Inspection).

Re: Downloadable application lock by SmartEndpoint policies.

Arkavia_Network — Mon, 08 Apr 2019 15:35:38 GMT

Thanks for your answer.

Finally I spoke with TAC and they told me that it was not possible to carry out that configuration through SmarEndpoint policies.

Re: Downloadable application lock by SmartEndpoint policies.

Maksym_Sofer — Sun, 21 Apr 2019 12:29:27 GMT

SandBlast extension could block specific file type to be downloaded at all.

It could be either Standalone extension which is managed from gateway or extension installed as part of Threat Extraction and Emulation (TE) blade.

TE blade it is controlled in the following way:

SmartEndpoint -> Policy Tab -> "Threat Extraction and Emulation" section -> Protect web download with Threat Emulation.
Right-click and select "Edit shared action", now click on "Override default file action per file type".

Ther you can set for EXE - Block Download.