How to block additional file types?

[reaper]

Kate

this is a pretty long list, are you looking for a specific filetype ?

[kiwi]

Hi @KateAdetola,

To see the current list of supported file types you can search the 'File Type' column in the File Blocking Profile.  You'll see that the list has grown considerably :

File Types

Alternatively you can check out the following article :

Supported File Types

Cheers !

-Kiwi.

[KateAdetola]

Hi,

Yes I am specifically after .msp file types, as we woild like to block end users from downloading and installing .msp files. This is not on the list of supported files currently.

Thanks,

Kate.

[KateAdetola]

Thanks for this update Kiwi; however .msp is not on the list. Any suggestions?

Thanks,

Kate.

[Raido]

If it is binary file you might try hex editor to get binary signature from beginning of file and create your own vulnerability signature.

[jvalentine]

MSP files are currently detected under the Microsoft MSOFFICE file type, ID 52033 (at least that's how they're detected when passed through my firewall in my environment).  

If blocking that causes you other issues, then I would recommend talking with your Palo Alto Networks SE to see if .MSP can be either combined with .MSI, or broken out on its own.  

[KateAdetola]

Thanks @jvalentine; I will try this option and if it causes any problems I will speak to our PAN SE to see what is possible. 

Thank you everyone for your responses!