Can you control cloud service-based traffic by file extension?
Article ID: 168753
Web Security Service - WSS
You want to control traffic based on the file extension of the target destination.
While you currently cannot target the exact file type, the Web Security Service (ThreatPulse) allows you to block by file types, such as archives and compressed files, audio and music files, and executables.
Accomplish this from the Limits page of in the Content Filtering Rules editor (Solutions > Content Filter > Policy).