cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3223
Views
5
Helpful
1
Replies

Blocking file types

JimBaucom0912
Level 1
Level 1

I am trying to figure out how to block certain types of files from being created on the workstation using AMP.    The example is I want to prevent a user from drag and dropping an email onto their local drive (.msg) file.    I have been told I may be able to create a custom signature for this, but the custom signature documentation is really complicated to understand and figure out what the syntax actually needs to be.  Has anyone actually done this or ran across this? 

 

Thanks,

Jim 

1 Reply 1

Hi Dear Guru's 

Is there any way to block specific file extension on cisco AMP portal without knowing of its Hash Please help