topic Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip in Automation/API Discussions https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51560#M1161 <HTML><HEAD></HEAD><BODY><P>Our current file blocking policy blocks zip files, however, users are getting blocked from downloading compressed Office documents.&nbsp; Office 2007 and 2010 save files in the docx, pptx, xlsx type extensions.&nbsp; They are technically zip files, since you can change the extension to .zip and it will open in a zip program.</P><P></P><P>The thought was to create a custom signature to allow these files, since the following seems to be persistent.</P><P></P><P>The file starts with: 50 4B 03 04 14 00 06 00 08 00 00 00 21 00</P><P>At offset 1E, it contains: 5B 43 6F 6E 74 65 6E 74 5F 54 79 70 65 73 5D 2E 78 6D 6C&nbsp; (this is the description for the file name [Content_Types].xml, which appears in these types of files)</P><P></P><P>Is there a way to make this work?</P><P></P><P>Thanks,</P><P>Carlo</P></BODY></HTML> Tue, 10 Jan 2012 18:26:14 GMT CarloGrossman 2012-01-10T18:26:14Z Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51560#M1161 <HTML><HEAD></HEAD><BODY><P>Our current file blocking policy blocks zip files, however, users are getting blocked from downloading compressed Office documents.&nbsp; Office 2007 and 2010 save files in the docx, pptx, xlsx type extensions.&nbsp; They are technically zip files, since you can change the extension to .zip and it will open in a zip program.</P><P></P><P>The thought was to create a custom signature to allow these files, since the following seems to be persistent.</P><P></P><P>The file starts with: 50 4B 03 04 14 00 06 00 08 00 00 00 21 00</P><P>At offset 1E, it contains: 5B 43 6F 6E 74 65 6E 74 5F 54 79 70 65 73 5D 2E 78 6D 6C&nbsp; (this is the description for the file name [Content_Types].xml, which appears in these types of files)</P><P></P><P>Is there a way to make this work?</P><P></P><P>Thanks,</P><P>Carlo</P></BODY></HTML> Tue, 10 Jan 2012 18:26:14 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51560#M1161 CarloGrossman 2012-01-10T18:26:14Z Re: Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51561#M1162 <HTML><HEAD></HEAD><BODY><P><SPAN>I guess so, take a look at rkim's first reply in </SPAN><A class="jive-link-external-small" href="https://live.paloaltonetworks.com/thread/2898?tstart=0">https://live.paloaltonetworks.com/thread/2898?tstart=0</A><SPAN> for guidelines on how to submit app requests.</SPAN></P></BODY></HTML> Wed, 11 Jan 2012 09:58:33 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51561#M1162 mikand 2012-01-11T09:58:33Z Re: Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51562#M1163 <HTML><HEAD></HEAD><BODY><P>How do I create a custom application or data filtering profile for this?</P></BODY></HTML> Thu, 19 Jan 2012 18:55:13 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51562#M1163 CarloGrossman 2012-01-19T18:55:13Z Re: Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51563#M1164 <HTML><HEAD></HEAD><BODY><P>If I could do a pattern match in the context of file-ZIP-body, that would help, but that doesn't seem to exist.</P></BODY></HTML> Thu, 19 Jan 2012 19:21:06 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51563#M1164 CarloGrossman 2012-01-19T19:21:06Z Re: Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51564#M1165 <HTML><HEAD></HEAD><BODY><P style="font-size: 13.3333330154419px;">We have the same problem. I'm looking for ...</P><P style="font-size: 13.3333330154419px;">Do you know any solution?</P><P style="font-size: 13.3333330154419px;">:smileyconfused:</P><P style="font-size: 13.3333330154419px;">Regards,</P></BODY></HTML> Tue, 03 Feb 2015 09:41:00 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51564#M1165 SOC_CSG 2015-02-03T09:41:00Z Re: Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51565#M1166 <HTML><HEAD></HEAD><BODY><P>hi,</P><P></P><P>feature request already open: <SPAN lang="DE" style="color: black; font-family: 'Arial',sans-serif; font-size: 9pt; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: DE; mso-fareast-language: EN-US; mso-bidi-language: AR-SA;">FR ID:1829 </SPAN></P><P><SPAN lang="DE" style="color: black; font-family: 'Arial',sans-serif; font-size: 9pt; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: DE; mso-fareast-language: EN-US; mso-bidi-language: AR-SA;">please contact your SE to vote for it! I already did and we need more votes <img id="smileywink" class="emoticon emoticon-smileywink" src="https://live.paloaltonetworks.com/i/smilies/16x16_smiley-wink.png" alt="Smiley Wink" title="Smiley Wink" /></SPAN></P><P><SPAN lang="DE" style="color: black; font-family: 'Arial',sans-serif; font-size: 9pt; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: DE; mso-fareast-language: EN-US; mso-bidi-language: AR-SA;"><BR /></SPAN></P><P><SPAN lang="DE" style="color: black; font-family: 'Arial',sans-serif; font-size: 9pt; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: DE; mso-fareast-language: EN-US; mso-bidi-language: AR-SA;"></SPAN></P></BODY></HTML> Wed, 04 Feb 2015 10:27:50 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/custom-app-to-allow-office-07-10-docx-xlsx-etc-while-blocking/m-p/51565#M1166 Hithead 2015-02-04T10:27:50Z