We use Web Protection with Web Filtering. To allow service downloads for a particular software, a (regular) filter exception has been created.
^https?://([A-Za-z0-9.-]*\.)?www\.schueco-service\.de/servicepack/GDF/[A-Z-a-z0-9._-]*\.exe$
Associated to this exception we skipping these checks: Authentication / Caching / Block by download size / Antivirus / Extension blocking / Content Removal / SSL scanning
Downloading the file
www.schueco-service.de/.../SP05-2017R2_x64.exe
works very well, while downloading the file
www.schueco-service.de/.../SchueCam_Setup_1_V20.17.04.07 PBX.exe
will be blocked.
The request will be blocked with status:
httpproxy[16056]: id="0064" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden file extension detected" action="block" method="GET" user="" group="" ad_domain="" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Web Filter Profile)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2602" request="0xdd126400" url="www.schueco-service.de/.../SchueCam_Setup_1_V20.17.04.07 PBX.exe" referer="" error="" authtime="0" dnstime="0" cattime="332" avscantime="0" fullreqtime="2138782" device="0" auth="0" ua="Visual Patch 3.5" exceptions="" category="105" reputation="neutral" categoryname="Business" reason="extension" extension="exe" filename="SchueCam_Setup_1_V20.17.04.07 PBX.exe"
But for some reason that exception gets ignored (maybe a problem with the whitespace character ?).
Any ideas and suggestions are welcome.
Many thanks in advance.
This thread was automatically locked due to age.
