blocking audio/video via File blocking Security Profiles but most filetypes are missing

[rfle.rz]

Hello,

I'm running 3.1 und want to create a profile to block common audio/video-content in general but can't find most of the corresponding file-types to select, i.e. mp3, mp4, xvid, divx, rm, mkv .. ( although some are numbered in file-type list of nrice )

Any idea to cover this ?

[rps]

Are there no applications you can use for this instead?

Or is that not an option in your case? Like setup an application filter containing:

category: media

subcategory: audio-streaming

category: media

subcategory: photo-video

Another method worth investigating might be to setup a custom url-category where you set the urls to:

*.mp3

*.mp4

and so on... the downside is the false-positives if you visit a page that ends in lets say .mp3 but its actually an html-page (or for that matter if you have clients running ie who ignores the ending and goes for the magic bytes instead - like an url which ends with .htm but its actually an exe-file and so on).

[axel.bodart]

Any news on this, as the suggested solution is not really applicable (in my case anyway) ?

[nrice]

You may want to submit a feature request through your SE for the file types you need.  We have the signatures for all of those on the list your are referring to but some (such as MP3) have not been tested and released yet.  The only files supported at this time are those that appear under File Blocking on the Objects tab.

[rfle.rz]

Hello again,

I still can't see a major improvement in common audio/video-formats available for blocking.

Blocking applications or subparts of it like suggested has become harder ( V3.1.x ) because of the applications dependeny problems

listed during config-validation, which themselve ( if trying to resolve ) cause other issues e.g. with URL-policiy handling.

If you have them available ( as noted ), why don't you allow us customers to test under real-life conditions.

It would be better than to have nothing, and I asume a high ( maybe not perfect ) detection rate.

One more thing that would be very helpful would be to negate users/group in a policy ( like negating ip-addresses )

Kind Regards

Franz Leippert

[migration]

Hi Frank,

As regards availability of audio/video file formats, did you already correspond with your SE/partner regarding the formats you are looking for (I know you have mentioned some formats in your initial email but just wanted to make sure that we have the complete and prioritized list).  I have passed your feedback regarding negate user/group to relevant folks.

Thanks for your feedback,

Sandeep

[rfle.rz]

Hello Sandeep,

I'll check on this again with my partner

Kind Regards

Franz Leippert