Can we block specific file extension in CheckPoint EPM?

[Blason_R]

Hi Guys,

To mitigate the current threat I wanted to block .one extension in on-premise  CheckPoint EPM version R81.10/R81. I guess that option is only present in Cloud instance but its not there in on-premise or any script, any other tweak?

TIA

Blason R

[Chris_Atkinson]

From memory "Web Download Protection" feature of the browser agent should allow to "block" file types rather than emulate or extract them but it may not apply to all possible file types, see:

https://sc1.checkpoint.com/documents/r80.40/smartendpoint_olh/en/topics-epsg/tewebdownloadsprotectio...

[yanivatia]

Hi the link is not working.

We get lots of ioc updates requests to block specific file types and I can't see how to configure it

Thanks

[Chris_Atkinson]

This link should work:

https://sc1.checkpoint.com/documents/R80.40/SmartEndpoint_OLH/EN/Topics-EPSG/TEWebDownloadsProtectio...