This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Still no extension blocking within zip files?

I hope i am wrong,, I really do, but could it be true that in 2015 UTM still can not check for blocked extensions (no i am not talking about mime types i am talking about stupid simple extensions like .js) inside zip archives? This was announced for 9.300. Seems to me the announcement was wrong and only covers mime types. PLEASE tell me i am wrong. Best, Joerg


This thread was automatically locked due to age.
Parents
  • Unfortunately this is still the case, files within archives (e.g. zip files) will not be scanned for blocked file types or blocked extensions.

    Instead you would need to use MIME types to block inside archive files. Once this is enabled you would also need to enable 'MIME Blocking Inspects HTTP Body' under Web Protection > Filtering Options > Misc.
  • Hello Emily,

    could please explain, why this setting "MIME Blocking Inspects HTTP Body" is necessary and in which cases it is necessary and recommend? Are there any disadvantages? Afaik this option is disabled by default. But why, when you know, that this is necessary to block by mimetype within archives?

    And the next question, where is the documentation about that? I would suggest a honest article in the knowledgebase about the current problems with blocking files and also with tips about the best settings.

    Best Regards

    Sebastian

Reply
  • Hello Emily,

    could please explain, why this setting "MIME Blocking Inspects HTTP Body" is necessary and in which cases it is necessary and recommend? Are there any disadvantages? Afaik this option is disabled by default. But why, when you know, that this is necessary to block by mimetype within archives?

    And the next question, where is the documentation about that? I would suggest a honest article in the knowledgebase about the current problems with blocking files and also with tips about the best settings.

    Best Regards

    Sebastian

Children
No Data