Block specific file types in Cloud SWG (WSS)

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

You want to know how to block specific files types from user access in Cloud Secure Web Gateway (formerly known as WSS).

Resolution

To block a file type

1. Log in to the Cloud SWG portal.
2. Navigate to Policy > Threat Protection > "Add Rule" (in Group B).
3. Select the conditions you want to be matched in the rule [Image 1].
   • Specify the Who / What / Where From (in Sources).
   • Specify Where To (in Destinations)
   • Specify What (in Contents and Limits)
4. On the Content and Limits section, specify the file type to block.
5. On the Verdict page, determine what happens when the rule conditions are matched.
6. After creating each rule, click Activate. The policy is activated.

[Image 1] Threat protection Add rule (Group B)

Additional Information

Important note: File based policies are intended to be put in the Threat Protection layer rather than the Content Filtering / Acceptable Use layer.

Specifically advanced verdicts available in the Content Filtering rules ("Allow with Coach" and "Block with Password Override") are designed to be applied to web-pages so that the coaching or password override page can be returned and displayed to the user.