topic Re: Block XLSM, AHK extensions in General Topics

Block XLSM, AHK extensions

MohammedAsik — Tue, 30 Apr 2019 14:16:43 GMT

Hi Team

How to block the XLSM, AHK extensions in firewall?

Please help us

Regards

Mohammed Asik

Re: Block XLSM, AHK extensions

reaper — Thu, 02 May 2019 13:27:10 GMT

XLSM are XLSX with macros enabled, those should be identified as xlsx (we inspect file attributes, not just the extension)

AHK are plaintext files, those may not be identified as they have no fiole attribus that set them apart from .txt files. if there's identifiable payload content scanning may still block the file

Re: Block XLSM, AHK extensions

MohammedAsik — Mon, 06 May 2019 08:51:45 GMT

Hi Reaper

Thanks for your response.

Is there any alternative way to block the those extension ?

Regards

Mohammed Asik

Re: Block XLSM, AHK extensions

MohammedAsik — Mon, 06 May 2019 09:13:20 GMT

Hi Reaper

If any malicious file with these extensions enters through firewall then what would be the effect. Please help us here.

Regards

Mohammed Asik