DLP in NGFW policy mode

[sebastan_bach]

Hi, 

I know that switching to NGFW mode will put the firewall inspection in flow mode. Any idea if we can use DLP sensor in flow mode. As it's not visible in the GUI. I tried enabling the DLP default sensor in Flow mode but still not visible in the GUI. 

We just to want to set a policy of blocking .exe, .dll files being downloaded from the internet. 

Any guidance on the same would be great. 

Sebastan

[hklb]

Hi,

You have to configure it with CLI only..

And I suggest to use DLP in flow-based :

config dlp sensor edit "DLPFlow" set flow-based enable next end

I tried, but it's not working well.. :)

Lucas