Downloadable application lock by SmartEndpoint policies.

[Diego_Carreno]

Hi all,

Currently I have the following scenario:

I need to block a downloadable application through policies of Smartendpoint and its client.

It is possible to customize such blocking, that is, a "test.exe" program can not be downloaded by a user.

Thank you very much for your attention!

[PhoneBoy]

On SmartEndpoint you should be able to prevent the application from running by using Application Control.
To prevent downloading, it's possible URL Filtering might be able to do it, but not sure.
A gateway running Anti-virus blade could do it (possibly requiring HTTPS Inspection).

[Arkavia_Network]

Thanks for your answer.

Finally I spoke with TAC and they told me that it was not possible to carry out that configuration through SmarEndpoint policies.

[Maksym_Sofer]

SandBlast extension could block specific file type to be downloaded at all.

It could be either Standalone extension which is managed from gateway or extension installed as part of Threat Extraction and Emulation (TE) blade.

TE blade it is controlled in the following way:

SmartEndpoint -> Policy Tab -> "Threat Extraction and Emulation"  section -> Protect web download with Threat Emulation.
Right-click and select "Edit shared action", now click on "Override default file action per file type".

Ther you can set for EXE - Block Download.