topic Re: OneNote Extension File blocking in Advanced Threat Prevention Discussions

OneNote Extension File blocking

kmcireland — Wed, 08 Feb 2023 08:55:02 GMT

There has been an increase of reports of malware using One Note files in malware campaign but i dont see the .one extension listed in the file blocking list.

I see the Microsoft Office, I am not sure if .one is included in that category but i dont really want to block all the office files just the .one files.

Could this the .one file extension be included in the file block list of extensions?

Re: OneNote Extension File blocking

KurtHinson — Wed, 08 Feb 2023 21:04:53 GMT

would like to block these as well!

Re: OneNote Extension File blocking

KurtHinson — Wed, 08 Feb 2023 21:18:06 GMT

I have opened a support case for this (02459142). Hopefully we can get some sort of response on this one as it is being used in the wild currently.

Re: OneNote Extension File blocking

JeremyDoehling — Wed, 15 Feb 2023 13:30:05 GMT

Hey, have you got some feedback so far?

Re: OneNote Extension File blocking

KurtHinson — Wed, 15 Feb 2023 14:29:18 GMT

This was Support's response: "This feature is currently unavailable in the Paloalto firewall, However I can see that feature request has been raised for this particular application with the feature ID of Fr ID: 21209 you can contact your SE and he can Implement this feature request. Once feature request is implemented the particular application would be available in near future."

Re: OneNote Extension File blocking

kkawachi — Wed, 01 Mar 2023 05:46:33 GMT

Now we have a plan to release file blocking signature for onenote application file.

So could you please monitor the content update package release.

Re: OneNote Extension File blocking

AliciaFoster — Thu, 16 Mar 2023 15:25:17 GMT

Ok, thanks for letting me know. 🙂

Re: OneNote Extension File blocking

kkawachi — Tue, 30 May 2023 07:35:21 GMT

Eventually 52345 has been released to cover "Onenote Document" as file blocking feature at Applications and Threats Content Release Notes Version 8713. Sorry for my delay in sharing the info.

Re: OneNote Extension File blocking

kkawachi — Tue, 30 May 2023 07:37:14 GMT

Eventually 52345 has been released to cover "Onenote Document" as file blocking feature at Applications and Threats Content Release Notes Version 8713. Apologize the delay in sharing the info.