How can I block file extensions for HTTPS?

Hey, Jim - Transparent or Standard?  'Decrypt and scan' HTTPS or just 'URL filtering only'?

Cheers - Bob

Hi Bob,

Currently transparent using decrypt and scan HTTPS.

Thanks,

Jim

Jim, what does a line from the Web Filtering log look like when an exe is let through on HTTPS?

Cheers - Bob

Hi Bob,

There is nothing logged regardless of it blocking or passing a exe file. I downloaded ccleaner.exe, HTTP blocked, HTTS downloaded. No web filter logging.......

Thanks,

Jim

That means the access isn't going through Web Filtering, Jim.

Cheers - Bob

Bob,

Clearly I must have missed something.... If extensions are blocked on HTTP the proxy is doing some filtering. Is there a seperate setting to enable it on HTTPS? Catagories are bloced on HTTPS.

Thanks,

Jim

Bob,

I realized that I selected Decrypt and scan the following so catagories could be blocked as opposed to just decrypt and scan. Is this setting the likely cause of no HTTPS extension blocking?

Thanks,

Jim

Hi Bob, hi Jim,

I have the same problem, we use Sophos UTM9 release 9.408-4. In 'Web Protection' -> 'Webfilter' in the third tab 'Policies' we have a profile defined. When you edit the filteractions in the third tab 'Downloads' there is a part 'Blocked extensions' where .exe and some other extensions are defined.

This works well on http sites but definetly not on https sites.

Is it a setting in 'Web Protection' -> 'Webfilter' on the tab 'HTTPS' that I have missed to configure?

thanks

Eva 

Hi Bob, hi Jim,

I have the same problem, we use Sophos UTM9 release 9.408-4. In 'Web Protection' -> 'Webfilter' in the third tab 'Policies' we have a profile defined. When you edit the filteractions in the third tab 'Downloads' there is a part 'Blocked extensions' where .exe and some other extensions are defined.

This works well on http sites but definetly not on https sites.

Is it a setting in 'Web Protection' -> 'Webfilter' on the tab 'HTTPS' that I have missed to configure?

thanks

Eva