7.13	Configuring file-type filters

GFI EndPointSecurity allows you to specify file type restrictions on files, such as .DOC or .XLS files, being copied to/from allowed devices. You can apply these restrictions to any user and user group that is a member of the Active Directory (AD) or local users and groups schema. You can do this on a protection policy by policy basis.

Filtering is based on file extension checks and real file type signature checking. Real file type signature checking can be done on the following file types:

 

AVI	BMP	CAB	CHM	DLL	DOC	EMF	EXE
GIF	HLP	HTM	JPE	JPEG	JPG	LNK	M4A
MDB	MP3	MPEG	MPG	MSG	MSI	OCX	P7M
PDF	PPT	RAR	RTF	SYS	TIF	TIFF	TXT
URL	WAV	XLS	ZIP

 

For any other file type not specified above, filtering is based only on the file extension.

NOTE: File-type filtering only applies to device categories and/or ports for which permissions have been set to allow access.

To specify file type restrictions:

1. Click on the Configuration tab.

2. Click Protection Policies.

3. From the left pane, select the protection policy for which you want to specify file-type restrictions.

4. From the right pane, click File-type Filter in the File control section.

Screenshot 82 - Select the restrictions to apply

5. Select the restriction to apply:

•	Allow all files but block the usage of specified file types

•	Block all files but allow the usage of specified file types

Screenshot 83 - Specify file type and user

6. Click Add to select the file type and the user(s)/group(s) to whom the restriction will apply. Repeat for each file type you want to restrict.

7. Click OK twice to finalize settings.

8. Deploy the protection policy updates on to the computers included in the policy. From the left pane, right-click on the protection policy you configured and select Deployment ► Deploy agent(s).

NOTE: You can also use the keyboard shortcut CTRL + D to perform this step.