ISA 2004 Filetype blocking

[indiegirl]

Yes, yes, yes, I know I should use a third party app to sort my ever-increasing problems, but does anyone know if there's a way to block attachments from being downloaded/opening through ISA?

 

Under our firewall policy, we have a list of content types which should be blocked, but they don't appear to be! I think that this is due to the list not being called under our restricted web section.

 

Once one creates a list under 'content type' - is that a list of allowed or disallowed sites?

 

In our firewall policy, we have the restricted web section (set to 'deny'), but under content types 'all' is selected (and therefore seems to be all allowed). If I select our specific list from the 'selected content types' - is that going to block or allow that list?

 

I'm a bit confused here, as you may be too!

[MrDylan]

I just created the following rule:

Name: Block Extension

Action: Deny

Protocols: All Outbound Traffic

From: Internal

To: External

Users: All Users

Schedule: Always

Content Types: Images

 

This then stopped all image file types from loading, even for me.

 

I assume if you create a new Content Type Set in your toolbox, and apply the Deny Rule to this, instead of a premade one, it would block those file types. You can enter the extension as opposed to using a listed MIME type I think, if this is easier/more customizable.

[MrDylan]

I just tried adding a new Content Set with just jpg to be blocked, and it didn't block anything.

I had to select the image/jpeg option instead, that succeeded in blocking all jpgs.