One Note Files Block using CAS

Products

• CAS-S500
• CAS-VA
• CAS-S400
• CAS-S200

Issue/Introduction

Is it possible to block OneNote files (<filename>.one), even if they are in archives? 

 

Environment

Release : 3.1.5.1

Resolution

Unfortunately the only option found on the Proxy SG is to block via extension. Neither mime type nor apparent data type does not identify .one files.

Therefore we can use the Content Analysis server and the Antivirus settings ( Services> AV filetypes) and add the in the File extensions list to block as in the below screenshot.

The OneNote extensions are .one and .onepkg and will be blocked even if in an archive.