Configuring file-type filters

GFI EndPointSecurity allows you to specify file type restrictions on files, such as .DOC or .XLS files, being copied to/from allowed devices. You can apply these restrictions to any user and user group that is a member of the Active Directory (AD) or local users and groups schema. You can do this on a protection policy by policy basis.

NOTE 1: Filtering is based only on file extension checks, and not on real file-type signature checking.

NOTE 2: File-type filtering only applies to device categories and/or ports for which permissions have been set to allow access.

To specify file type restrictions:

1. Click on the Configuration tab.

2. Click Protection Policies.

3. From the left pane, select the protection policy for which you want to specify file-type restrictions.

4. From the right pane, click File-type Filter in the File control section.

Screenshot 80 - Select the restrictions to apply

5. Select the restriction to apply:

•	Allow all files but block the usage of specified file types

•	Block all files but allow the usage of specified file types

 

Screenshot 81 - Specify file type and user

Click Add to select the file type and the user(s)/group(s) to whom the restriction will apply. Repeat for each file type you want to restrict.

Click OK twice to finalize settings.

6. Deploy the protection policy updates on to the computers included in the policy. From the left pane, right-click on the protection policy you configured and select Deployment > Deploy agent(s).

NOTE: You can also use the keyboard shortcut CTRL + D to perform this step.