topic Deny a specific file from being uploaded into Wildfire? in General Topics

Deny a specific file from being uploaded into Wildfire?

genep — Fri, 20 Jun 2014 19:42:12 GMT

Is there a way to deny a specific file from being uploaded into the Wildfire service?

Re: Deny a specific file from being uploaded into Wildfire?

kadak — Fri, 20 Jun 2014 20:16:46 GMT

If you know the source IP address of the file, you can create a security rule on top of the existing rule with a that IP address configured in it and NOT associate any file blocking profile to it.

Hope that helps!

Thanks and regards,

Kunal Adak

Re: Deny a specific file from being uploaded into Wildfire?

pulukas — Mon, 23 Jun 2014 22:00:31 GMT

You can only restrict by file type inside a Wildfire configuration.

Or by the user/station source overall, as Kadak notes, in the rule.

You can't exclude a particular file name. Wildfire compares hashes not names so it does not even pay attention to the file name in the process.

Re: Deny a specific file from being uploaded into Wildfire?

robmaas — Fri, 13 Dec 2019 11:29:57 GMT

Sorry to kick an old topic.

But indeed it would be nice to have an option to make exemption(s) for a certain hash(es).

I think you really want it on hashes in case a file changes.