EXE Extension for Firmware version: 9.703-2

Question

i am trying to block the exe files download but https keep allowing users to download it, by using decrypt and scan option it block the whole websites. any suggestion would be appreciated. 
 Thanks

Jonas92 · Accepted Answer

Decrypt and scan is the right way to go. You already installed the sophos web proxy certificate to prevent ssl error messages?! 
 Then you need to know which settings block the whole website, delete all settings and add settings step by step. Also the webfilter livelog is a good tool for debugging. 
 
 best regards, 
 Jonas

Jonas92 · Answer

Web Protection -> Filteroptions -> HTTPS-CAs -> Download (PEM). 
 You need to install the certificate via mmc trust -> trustet root. 
 For maximum security, deploy the proxy certificate via gpo and scan/decrypt traffic from all clients of your network. It is great because you can control / secure everything (surf ports) of your network :)