This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BLOCKING DOWNLOAD EXE FILES OVER THE BROWSER

Furkan Araci over 4 years ago

Hey Sophos community,

I am using the Sophos XG firewall. I research how to block to download files over the browser.

I try to block files but It did not work for the file extension that is called "exe".

I just applied the above method to block files. But it did not work.

Is there any way to block any executables files that download over the browser?

Best regards

This thread was automatically locked due to age.

Parents

0 Steve Savenelli over 4 years ago

"Risky Downloads" should block .exe files from downloading. Do you have the web "default policy" applied on your LAN to WAN rule?
Cancel
Vote Up 0 Vote Down

Cancel
0 Furkan Araci over 4 years ago in reply to Steve Savenelli

Yes, I have one, And I applied this rule over it.

Actually , ı want to block every single ".exe" file that downloads over the browser.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi Furkan,

are you using the HTTP/S proxy with scanning enabled and have you installed the XG or similar CA on your browser?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Furkan Araci over 4 years ago in reply to rfcat_vk

Hi rfcat_vi,

No ı do not use the HTTP/S with scanning in my XG, because The XG firewall that mine does not support this thing.

I m so sorry about CA, ı don't know what is that mean? but ı do not installed anything like this .

Is there a way that blocks a ".exe" file?

Best Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi Furkan

the CA certificate used in https scanning and other security functions.

If you do not have the HTTP/S proxy then you will not be able to scan incoming connections and block attachments.

ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi Furkan

the CA certificate used in https scanning and other security functions.

If you do not have the HTTP/S proxy then you will not be able to scan incoming connections and block attachments.

ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Furkan Araci over 4 years ago in reply to rfcat_vk

Thanks for reply rfcat_vk,

So that I just block to executable files from the XGFirewall->Web->Polices

I really wonder that, What is it work? executables files?
can you see the above image?

I just give some example of this topic,

I am a user in the local area, I want to download java.exe from the "java.com" , ı do no want which the user download this file.

Best Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi Furkan,

you will need a firewall rule with http/s enabled to use that policy.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Furkan Araci over 4 years ago in reply to rfcat_vk

Thanks you rfcat_vk ,

Best Regards
Cancel
Vote Up 0 Vote Down

Cancel