blocking exe files for https traffic on Ironport

[cyberops123]

Hi

we will try to implement ssl decryption on the Ironport and I was thinking if there is a way to block file typessuch as exe,pdf...) when Ironport decrypts SSL cert .

I know how to do this for http traffic but was not sure how to configure it for https encrypted traffic .

Thanks

[balaji.bandi · Accepted solution]

if you have access rules already in place, same rules will apply when you do https decryption.

[Josiane de Barros Silva · Accepted solution]

In Acess Polices

In the (Objects) column you have the option to block:

#Archives

ARC,ARJ,BinHex,Lharc and Stuffit

#Inspectable Archives
7zip, BZIP2,Compresss Archive(Z), CPIO,GZIP, LHA,Microsift CAB,rar,tar,ziparchive

#Document Types
FrameMaker Document (FM), microsoft office , OASIS open document format , openoffice document, portable document format (pdf) , postscript document(ps) , rich text format(rtf), xml document (xml)

#Executable Code
Java Applet , UNIX executable and Windows executable

#Installers
UNIX;LINUX packages

#Media
Audio, Video and Photographic Image Processing formats(TIFF;PSD)

#P2P Metafiles
BitTorrent links(.torrent)

#Web page content
Flash , Images

#Miscellaneous
Calendar Data