File Blocking Profiles
The firewall uses file blocking profiles two ways: to forward files to WildFire for analysis or to block specified file types over specified applications and in the specified session flow direction (inbound/outbound/both). You can set the profile to alert or block on upload and/or download and you can specify which applications will be subject to the file blocking profile. You can also configure custom block pages that will appear when a user attempts to download the specified file type. This allows the user to take a moment to consider whether or not they want to download a file.
You can configure a file blocking profile with the following actions:
Alert —When the specified file type is detected, a log is generated in the data filtering log. Block —When the specified file type is detected, the file is blocked and a customizable block page is presented to the user. A log is also generated in the data filtering log. Continue —When the specified file type is detected, a customizable response page is presented to the user. The user can click through the page to download the file. A log is also generated in the data filtering log. Because this type of forwarding action requires user interaction, it is only applicable for web traffic. Forward —When the specified file type is detected, the file is sent to WildFire for analysis. A log is also generated in the data filtering log. Continue-and-forward —When the specified file type is detected, a customizable continuation page is presented to the user. The user can click through the page to download the file. If the user clicks through the continue page to download the file, the file is sent to WildFire for analysis. A log is also generated in the data filtering log.

Related Documentation