|
Applicable to Version: 10.00 onwards
Requirement
To block a specific file type in web category in Cyberoam.
Cyberoam provides default categories, which can be used to block the malicious and objectionable contents. Category is a grouping of URLs. When we block the category, access to all the URLs get blocked.
In this article, a hypothetical example is illustrated to block specific file type i.e (Executable Files) in web category (WebBasedEmail) in Cyberoam. If you want to allow WebBasedEmail category and deny executable file from WebBasedEmail category, then specify Allow action for WebBasedEmail category and add Executable File in Exception list.
This document explains to block specific file type category (E.g. .exe etc) from WebBasedEmail category, but allow this file type for other categories.
Prerequisite
Web and Application Filter Module Subscribed
Solution
The entire configuration is to be done from Web Admin console. Access Web Admin console with user having “Administrator” profile.
Step 1: Create Web Filter Policy
Here Specific File Type (.exe) has been blocked for WebBasedEmail Category for user ‘John’ and has been allowed for all other categories.
Go to Web Filter à Policy à Policy and click “Add” button to create a Web Filter Policy with the following parameters.
Click OK and the Web Filter Policy ‘BlockEXEFiles’ will be created successfully.
Note:
You can also define file type policies to define different levels of access for different users to meet your organization’s requirements.
Step 2: Add Web Filter Policy Rules
Go to Web Filter à Policy à Policy and click on ‘Add’ button to add web filter policy rules. Click the Edit icon  in the Manage column against the Web Filter Policy to which rules are to be added.
Click OK and the Web Filter Policy Rule will be added successfully.
Step 3: Apply Web Filter Policy to User
- Go to Identity à Users à User
- Select user to apply Web Filter policy created in Step 1.
- Under Policies Section, select ‘BlockEXEFiles’ for Web Filter
- Click OK button to update
Above configuration will restrict File Type Category i.e .exe on Web Category – WebBasedEmail for user ‘John’ and would be allowed for all other categories.
Note
In this article policy has been applied on user. Policy can also be applied on Groups and Firewall.
Document Version: 1.0–29/08/2011
| 
