OneNote Extension File blocking

[kmcireland]

There has been an increase of reports of malware using One Note files in malware campaign but i dont see the .one extension listed in the file blocking list. 

I see the Microsoft Office, I am not sure if .one is included in that category but i dont really want to block all the office files just the .one files.

Could this the .one file extension be included in the file block list of extensions?

[KurtHinson · Accepted solution]

 would like to block these as well!

[KurtHinson]

I have opened a support case for this (02459142).  Hopefully we can get some sort of response on this one as it is being used in the wild currently.

[JeremyDoehling]

Hey, have you got some feedback so far?

[KurtHinson]

This was Support's response:  "This feature is currently unavailable in the Paloalto firewall, However I can see that feature request has been raised for this particular application with the feature ID of Fr ID: 21209 you can contact your SE and he can Implement this feature request. Once feature request is implemented the particular application would be available in near future."

[kkawachi]

Now we have a plan to release file blocking signature for onenote application file. 

So could you please monitor the content update package release. 

[AliciaFoster]

Ok, thanks for letting me know. 🙂

[kkawachi]

Eventually 52345 has been released to cover "Onenote Document" as file blocking feature at  Applications and Threats Content Release Notes Version 8713. Sorry for my delay in sharing the info. 

[kkawachi]

Eventually 52345 has been released to cover "Onenote Document" as file blocking feature at  Applications and Threats Content Release Notes Version 8713. Apologize the delay in sharing the info.