topic blocking audio/video via File blocking Security Profiles but most filetypes are missing in General Topics

blocking audio/video via File blocking Security Profiles but most filetypes are missing

rfle.rz — Thu, 18 Mar 2010 12:33:09 GMT

Hello,

I'm running 3.1 und want to create a profile to block common audio/video-content in general but can't find most of the corresponding file-types to select, i.e. mp3, mp4, xvid, divx, rm, mkv .. ( although some are numbered in file-type list of nrice )

Any idea to cover this ?

Re: blocking audio/video via File blocking Security Profiles but most filetypes are missing

rps — Thu, 18 Mar 2010 21:16:42 GMT

Are there no applications you can use for this instead?

Or is that not an option in your case? Like setup an application filter containing:

category: media

subcategory: audio-streaming

category: media

subcategory: photo-video

Another method worth investigating might be to setup a custom url-category where you set the urls to:

*.mp3

*.mp4

and so on... the downside is the false-positives if you visit a page that ends in lets say .mp3 but its actually an html-page (or for that matter if you have clients running ie who ignores the ending and goes for the magic bytes instead - like an url which ends with .htm but its actually an exe-file and so on).

Re: blocking audio/video via File blocking Security Profiles but most filetypes are missing

axel.bodart — Fri, 02 Apr 2010 14:43:02 GMT

Any news on this, as the suggested solution is not really applicable (in my case anyway) ?

Re: blocking audio/video via File blocking Security Profiles but most filetypes are missing

nrice — Fri, 02 Apr 2010 23:36:56 GMT

You may want to submit a feature request through your SE for the file types you need. We have the signatures for all of those on the list your are referring to but some (such as MP3) have not been tested and released yet. The only files supported at this time are those that appear under File Blocking on the Objects tab.

Re: blocking audio/video via File blocking Security Profiles but most filetypes are missing

rfle.rz — Thu, 07 Oct 2010 09:04:52 GMT

Hello again,

I still can't see a major improvement in common audio/video-formats available for blocking.

Blocking applications or subparts of it like suggested has become harder ( V3.1.x ) because of the applications dependeny problems

listed during config-validation, which themselve ( if trying to resolve ) cause other issues e.g. with URL-policiy handling.

If you have them available ( as noted ), why don't you allow us customers to test under real-life conditions.

It would be better than to have nothing, and I asume a high ( maybe not perfect ) detection rate.

One more thing that would be very helpful would be to negate users/group in a policy ( like negating ip-addresses )

Kind Regards

Franz Leippert

Re: blocking audio/video via File blocking Security Profiles but most filetypes are missing

migration — Thu, 07 Oct 2010 17:43:04 GMT

Hi Frank,

As regards availability of audio/video file formats, did you already correspond with your SE/partner regarding the formats you are looking for (I know you have mentioned some formats in your initial email but just wanted to make sure that we have the complete and prioritized list). I have passed your feedback regarding negate user/group to relevant folks.

Thanks for your feedback,

Sandeep

Re: blocking audio/video via File blocking Security Profiles but most filetypes are missing

rfle.rz — Fri, 08 Oct 2010 12:32:27 GMT

Hello Sandeep,

I'll check on this again with my partner

Kind Regards

Franz Leippert