How to create a custom vulerability signature to block .bin file type

[ttanzi]

We are in the process of investigating a way to block the download of .bin files. Since this is not a supported file type in file blocking, I am wondering if this can be done using s custom vulnerability signature.

Has anyone used custom vulnerability to block a specific file type? Example-   .bin

thanks in advance

[Dz3015]

What licensing do you have?  You don't happen to have wildfire do you?

[jkim2]

.bin should be indentifed under PE if its an execuatable, but i've also seen it get identified with FLV, MS office etc...

when you do a search in the data filtering logs does anythign show up with the filter

filename contains .bin