File Type Detection

The File Type Detection capability allows admins to configure policies to allow or block files based on file name or extension, a specific category (e.g. binary or executable), file type (e.g. Android Package Kit), or file size. Optionally, admins can send files for deep analysis using DLP or Threat Protection Profiles or create Real-time Protection policies to ensure the content of files are checked to avoid data exfiltration or malicious files.

To analyze files exceeding the default size, you can enable Advanced File Scanning, also known as Large File Support (LFS). This feature allows you to modify file size limitations and timeout values. To learn more, see: Advanced Content Scanning.

Configuring File Constraints

To configure file constraints:

1. Create a Real-time Protection policy or edit an existing policy. To learn more: Real-time Protection Policies.
2. Click Add Criteria & Constraints and select File Constraints.

   

3. Configure the following file constraints for the policy:

   File Name or Extension

   Use this option to restrict browsing, downloading, or uploading files based on file name or the file extension.

   1. Select whether the file should match or not match the conditions specified.
   2. Click Add File Name or Extension.

      

   3. In the Select File Name or Extension window, select if the matches are Case Sensitive. Then enter the file names with extensions, separated by commas (e.g., data.text,*.pdf). Alternatively, you can click Import from CSV to upload the file names and extensions.

      

   4. Click Save.

   File Type

   Use this option to restrict browsing, downloading, or uploading files based on various types of files or categories of files.

   1. Select whether the file should match or not match the conditions specified.
   2. Click Select File Type.

      

   3. In the Select File Type window, select a category or click the magnifier to view and select the file types within the category.

      

   4. (Optional) Click Categories to return to the Category list without making any changes.

      

   5. (Optional) Select the File Type Not Detected category if your file category is an unknown file type or doesn’t fall into an existing categorization. Scroll to the bottom of the list to view this category.

      

   6. Click Save.

   File Size

   Use this option to restrict the size of various types of files or categories of files that users can browse, upload, or download.

   1. Select whether the file should match or not match the conditions specified.
   2. Select an operator for the File Size criteria.

      

   3. Enter a value and select the unit of measurement for the File Size criteria. You can enter up to 1024 GB for the file size.

      

4. Configure the Profile & Action.
5. Add a policy name.
6. Click Save.