topic Re: How to create a custom vulerability signature to block .bin file type in Automation/API Discussions https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3511#M81 <HTML><HEAD></HEAD><BODY><P>.bin should be indentifed under PE if its an execuatable, but i've also seen it get identified with FLV, MS office etc...</P><P></P><P>when you do a search in the data filtering logs does anythign show up with the filter </P><P></P><P><STRONG>filename contains .bin</STRONG></P></BODY></HTML> Thu, 08 Jan 2015 19:34:28 GMT jkim2 2015-01-08T19:34:28Z How to create a custom vulerability signature to block .bin file type https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3509#M79 <HTML><HEAD></HEAD><BODY><P>We are in the process of investigating a way to block the download of .bin files. Since this is not a supported file type in file blocking, I am wondering if this can be done using s custom vulnerability signature. </P><P></P><P>Has anyone used custom vulnerability to block a specific file type? Example-&nbsp;&nbsp; .bin</P><P></P><P></P><P>thanks in advance</P></BODY></HTML> Thu, 04 Dec 2014 18:51:47 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3509#M79 ttanzi 2014-12-04T18:51:47Z Re: How to create a custom vulerability signature to block .bin file type https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3510#M80 <HTML><HEAD></HEAD><BODY><P>What licensing do you have?&nbsp; You don't happen to have wildfire do you?</P></BODY></HTML> Thu, 11 Dec 2014 15:08:03 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3510#M80 Dz3015 2014-12-11T15:08:03Z Re: How to create a custom vulerability signature to block .bin file type https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3511#M81 <HTML><HEAD></HEAD><BODY><P>.bin should be indentifed under PE if its an execuatable, but i've also seen it get identified with FLV, MS office etc...</P><P></P><P>when you do a search in the data filtering logs does anythign show up with the filter </P><P></P><P><STRONG>filename contains .bin</STRONG></P></BODY></HTML> Thu, 08 Jan 2015 19:34:28 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/how-to-create-a-custom-vulerability-signature-to-block-bin-file/m-p/3511#M81 jkim2 2015-01-08T19:34:28Z