How to Add custom file extensions in PA file extension list?

Wayne88 — Mon, 06 Feb 2017 02:30:59 GMT

Hello,

As we are implemeting Paloalto NGFW 3020 in our organization and now we facing a problem. We are implemeting security profiles and we want to add some file extensions which is not listed in PA file extension list. How could we add these custom file extensions such as *.vb, *.vbs, *.com etc...? Very appreciate for all of your valuable supports.

Re: How to Add custom file extensions in PA file extension list?

kiwi — Fri, 03 Feb 2017 12:36:44 GMT

Hi @Wayne88,

Palo Alto Networks firewalls don't block based on file extensions but rather on file types. The file blocking profile is “type” based and decoders are used to identify the file type, not the file's extension.

If your file name is long enough you could use a custom signature for a match but a minimum of 7 bytes is required so I'm guessing this won't work for you.

There's already a feature request for this (ID 668) where customers would like to see the fileblocking ability enhanced by allowing for a block to be defined based on a filename as well as file extension as an option. To add your vote to this FR I suggest that you reach out to your local SE.

Cheers !

-K

topic Re: How to Add custom file extensions in PA file extension list? in General Topics

How to Add custom file extensions in PA file extension list?

Re: How to Add custom file extensions in PA file extension list?