Excel downloads being blocked

[Peter_Neville]

In the last couple of days we've been getting reports from multiple users that they are being blocked from downloading .xlsx files from a cloud service. 

I can see that there are multiple entries in the Data Filtering log for each file, and then final one is showing a Threat ID of BIN file and being denied.

Anyone seen anything similar?

[NuriaTehas]

Hi,

Same issue in some firewalls.

I think the problem is originated by the updates in the last content version 9050 - 17th december.

File type BIN was added and some files match this type.

Workarround by now is set Multi-encoding-level in alert.

I hope this helps.

[Peter_Neville]

Thank you, that matches in with when we saw the problem start 13:00 17th Dec. I'll try that fix

[Peter_Neville]

After some discussion we decided we weren't all that happy relaxing the block restriction on the Multi-encoding-level file downloads. Spoke to our PaloAlto support who suggested temporarily reverting to the previous version of the Application & Threats content update 9049-9799, and can confirm that has fixed the download problems.

[bipereirad]

Hi everyone, after the latest automatic Applications and Threats update (version 9050-9804), we started seeing the same issue with .xlsx files—our Palo Alto is detecting them as .BIN. This ended up causing several incidents in our production network.

We’re applying the same workaround mentioned above by Peter_Neville. If anyone has an update from Palo Alto Support or knows whether there’s a fix for this, we’d really appreciate it—ideally we’d like to skip the affected version (9050-9804).