This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked File Extensions with option HTTPS URL filtering only

Hi,

we are using webfiltering with the option "https URL filtering only" and it seems the option to block file extensions for downloads (e.g. .exe, .msi) will only work for http-downloads and not for https-downloads? Can anybody confirm that fact? We are on UTM 9.506

Is there any possibility to block this without using the scan and decrypt option for https? Maybe if URL includes .exe...?

 

regards



This thread was automatically locked due to age.
  • That is correct.

    When you have that option, the UTM will only see the domain name that you are making the SSL connection to.  It will not see the individual GET requests or responses and cannot do any filtering such as the URL containing .exe.