Restricting non work related downloads and applications

[janelle_provine]

We have users that are able to download games from url site not classified as games on their work laptops to their personal folder on the fileserver. Is there anyway to restrict access to .exe file downloads and use without having to have a huge exception lists? I would like to hear various options if you have them

[reaper · Accepted solution]

applying either of the default file blocking profile to the internet access security rule will block downloading of executables (ssl decryption is required for this to work)

for any sites where you do need to be able to download executables (windows updates, AV updates, ...) create a rule that allows an application filter set for the "software updates" subcategory

or make a custom URL filtering category containing all the vendors you need downloads from and allow this category in the security rule category (as opposed to in url filtering)