Blocking Specific Files in Custom Threat prevention policy

[Rabin]

Hi Checkmats,

How can i block svg file format in custom threat prevention profile as dont see this file format in any settings. Could you guide me in this as i can see this it in only autonomous threat prevention profile.

Thank You.

Regards,

Rabindra 

[the_rock]

Hey Rabindra,

I believe you need content awareness for that.

Andy

[AkosBakos]

Hi Andy,

Yes, this was my idea too, but the extension is not trivial. 

What would you advise to achieve this? Where to set the extension?

Akos

[the_rock]

Those are pretty much same options I see 😞

[PhoneBoy]

I assume you set it in the "filename contains" box.

[AkosBakos]

Ohh no, *.svg would work? No I need some rest. 

Maybe with regexp 🙂

RTFM -- > 

• The file name contains - Enter a string or regular expression to match against file name

Life long learning 🙂

THX @PhoneBoy to opened my eyes 🙂

Akos

[the_rock]

Yea, that makes sense haha

Andy

[PhoneBoy]

There is always something to learn...or unlearn. 🙂

[the_rock]

I actually have content awareness enabled in the lab, so might test this, but there is tricky way to make that work properly with ssl inspection enabled. Will need to look at my notes from few years ago about it when I worked with customer and OTAC esc. guy on it.

Andy