file blocking by size

[Amr-Alzoghby]

How to block download file by size os 9.1 ??

[reaper]

You can create a custom threat and have it trigger once a byte count is exceeded

[Amr-Alzoghby]

could you explain the steps 

[reaper]

in objects > custom object > threats create a new threat, give it a nice name and an ID

in the signatures add a new signature, set it to 'session' scope (as you want to count many packets, not just the size of 1) and add a condition with perator greater than, for context http-rsp-content-length, or any other context that may apply and then set the size you want to hit on