topic Re: Can we block specific file extension in CheckPoint EPM? in Endpoint

Can we block specific file extension in CheckPoint EPM?

Blason_R — Sat, 04 Feb 2023 09:37:47 GMT

Hi Guys,

To mitigate the current threat I wanted to block .one extension in on-premise CheckPoint EPM version R81.10/R81. I guess that option is only present in Cloud instance but its not there in on-premise or any script, any other tweak?

TIA

Blason R

Re: Can we block specific file extension in CheckPoint EPM?

Chris_Atkinson — Sat, 04 Feb 2023 09:43:04 GMT

From memory "Web Download Protection" feature of the browser agent should allow to "block" file types rather than emulate or extract them but it may not apply to all possible file types, see:

https://sc1.checkpoint.com/documents/r80.40/smartendpoint_olh/en/topics-epsg/tewebdownloadsprotection.html

Re: Can we block specific file extension in CheckPoint EPM?

yanivatia — Thu, 04 Jan 2024 11:32:12 GMT

Hi the link is not working.

We get lots of ioc updates requests to block specific file types and I can't see how to configure it

Thanks

Re: Can we block specific file extension in CheckPoint EPM?

Chris_Atkinson — Thu, 04 Jan 2024 11:57:49 GMT

This link should work:

https://sc1.checkpoint.com/documents/R80.40/SmartEndpoint_OLH/EN/Topics-EPSG/TEWebDownloadsProtection.html