topic Re: Allow png, jpg. in Endpoint

Allow png, jpg.

earomero — Thu, 28 Nov 2024 14:37:40 GMT

Good morning from Argentina, I hope you are well.
In my governmental CNV organization, I cannot allow the download of .jpg and .png files.
I attach the error and the policies that I implemented to allow jpg and png.
I can download the office files.

Muchas gracias, saludos!

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 15:10:01 GMT

Greetings from Canada! I have to say, Argentina is pretty cool country and in my opinion, BEST meat dishes in the world : - )

Anywho, I believe below is what you need, but will check with one of my colleagues.

Andy

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 15:17:05 GMT

Saludos again! I think this must be it.

Andy

Re: Allow png, jpg.

earomero — Thu, 28 Nov 2024 16:46:15 GMT

Hello, thank you very much for your reply. We do have some very tasty meats, thank you!

I have the .jpg and .png exclusions activated and I cannot download those types of files. Ideally, they should not be excluded, but rather sanitized and returned clean.
The current policy shown in the photo would not impact my organization. What can I do?

Saludos!

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 17:07:09 GMT

That looks right to me. Sorry mate, Im not really endpoint furu, so would probably verify with TAC as well. lets see if anyone else may know.

Andy

Re: Allow png, jpg.

AdiGH — Thu, 28 Nov 2024 19:21:58 GMT

Hey @earomero,
You will need to configure this here:

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 19:29:45 GMT

Just checked client environment, dont see that option there...

Andy

Re: Allow png, jpg.

AdiGH — Thu, 28 Nov 2024 19:33:11 GMT

Cloud or on-prem? if this is cloud, can you share a screenshot of the configuration available under 'download protection' in Advanced Settings?

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 19:38:34 GMT

This is cloud.

See below, unless Im looking at the wrong setting?

Andy

Re: Allow png, jpg.

AdiGH — Thu, 28 Nov 2024 19:44:55 GMT

You are in a different view, we usually call it 'split mode' which is mostly common to tenants migrating from on-prem.

In any case, can you take a look under 'Threat Emulation' advanced settings?

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 19:48:55 GMT

Yup, see below. I see override action is available under threat emulation...I reckon that has to be it? 🙂

Andy

Re: Allow png, jpg.

AdiGH — Thu, 28 Nov 2024 19:50:09 GMT

Yes 🙂

Re: Allow png, jpg.

the_rock — Thu, 28 Nov 2024 20:28:11 GMT

Cool, thank you! Lets see if thats same setting @earomero needs.

I more asked, just being curious : - )

Andy

Re: Allow png, jpg.

earomero — Fri, 29 Nov 2024 16:11:44 GMT

Hello, greetings from Argentina, thank you very much for answering.
Yes, it does indeed work! However, this configuration is a bypass to the checkpoint agent. There is a way for .jpg and .png files to go through the agent and be sanitized. The objective is not to bypass checkpoint but to use it as a means to secure the environment.
Thank you very much, greetings!

Re: Allow png, jpg.

the_rock — Fri, 29 Nov 2024 16:14:19 GMT

Hey @earomero

Lets wait for @AdiGH to confirm, as its weekend already in Israel, so she may not reply until Sunday.

Best,

Andy

Re: Allow png, jpg.

the_rock — Mon, 02 Dec 2024 19:13:24 GMT

Hey @earomero

Were you able to figure this out?

Andy

Re: Allow png, jpg.

earomero — Tue, 03 Dec 2024 12:18:36 GMT

Hi! Ok, I'm waiting for your reply.

Gracias!!

Re: Allow png, jpg.

earomero — Tue, 03 Dec 2024 12:22:38 GMT

Hi, the recommendation you gave me is very good, however it is to allow unsupported files, creating a bypass in the checkpoint agent.
The objective is to allow .jpg and have them analyzed and sanitized by the checkpoint agent. It is difficult hahaha but not impossible, there must be a way to achieve it.
Greetings from Argentina!

Re: Allow png, jpg.

the_rock — Tue, 03 Dec 2024 12:23:39 GMT

Did you open TAC case yet?

Andy

Re: Allow png, jpg.

earomero — Tue, 03 Dec 2024 12:36:59 GMT

What is a TAC case? How can I open it?