Hot!DLP filter not blocking

Author
krusty
New Member
  • Total Posts : 17
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/03/14 15:39:37
  • Status: offline
2019/05/02 01:01:57 (permalink)
0

DLP filter not blocking

Hi,
 
Fortigate 50E v 6.0.2
I'm trying to block executable files being uploaded to to an ftp server using DLP but having some issues. I've set the inspection mode to proxy and used the DLP configuration below.
 
The problem is the file transfers are not blocked but the Fortigate logs indicate they have been blocked. 
 
Log:
Date/Time       Source   Service   Action   File Name   Filter Index   DLP Extra   Filter Type   Filter   Category De
2 minutes ago  x.x.x.x   FTP        block     putty.exe   1                  ExeBlock5   file-type      file      host:x.x.x.x
 
Config:
edit "ExeBlock"
config filter
edit 1
set proto smtp pop3 imap http-get http-post ftp
set filter-by file-type
set file-type 5
set action block
next
end

edit 5
set name "ExeBlock5"
config entries
edit "exe"
set filter-type type
set file-type exe
next
end
 
Any ideas what I'm missing?
 
Thanks
 
Dan
#1

0 Replies Related Threads

    Jump to:
    © 2019 APG vNext Commercial Version 5.5