File control by extension

Hi Alves,

Thanks for reaching out to the Sophos Community Forum. 

If you would like to block all applications from launching unless explicitly allowed, I would suggest using the Application Control policy. By specifying "Allow the detected application", only the applications you've specified on the allow-list will be allowed to execute. 

If you encounter new apps or exe's you wish to block, we suggest sending in an Application Control request. You can also block any portable executable file by using the "Blocked items" page in Sophos Central.

Another option would be to use a Software Restriction Policy via GPO

Let me know if this helps.

Hi Qoosh,

This helped me, thanks for the tips.