file-type (anti-APT profile view)

Function

The file-type command sets the types of files to be sent to a sandbox for detection.

The undo file-type command cancels the setting.

Format

file-type { name &<1-8> | all }

undo file-type [ name &<1-8> ]

Parameters

Parameter	Description	Value
name &<1-8>	Specifies a file type.	A maximum of eight files can be added or deleted at a time. The FW supports the following file types: 7Z, APK, ASP, AVI, BAT, BMP, BZIP2, CAB, CHM, CLASS, CMD, CSS, DOC, DOCX, DPS, ELF, EML, ET, FLV, GIF, GZ, HLP, HTML, JAR, JPG, JS, JSE, LNK, MHT, MOV, MP3, MP4, MSI, MSP, MST, PDF, PE32, PHP, PNG, POWERSHELL, PPT, PPTX, PSD, PY, RAR, RB, RTF, SWF, TAR, TIF, TXT, VBE, VBS, VSD, WPS, WSF, XLS, XLSX, and ZIP NOTE: Among the preceding file types, some types of files can only be sent to the local sandbox for inspection and cannot be sent to the cloud sandbox: Image files in BMP, GIF, JPG, PNG, and TIF types Webpage files in CHM, HTML, MHT, JS, PHP, ASP, and CSS types Media files in MP3, MP4, AVI, MOV, and FLV types Other files in CMD, VBE, RB, PY, POWERSHELL, JSE, WSF, LNK, TXT, and PSD types HTM files are identified as HTML files and PPS files are identified as PPT files before sending to a sandbox for detection.
all	Indicates all file types.	-

Parameter

Description

Value

name &<1-8>

Specifies a file type.

A maximum of eight files can be added or deleted at a time. The FW supports the following file types:

7Z, APK, ASP, AVI, BAT, BMP, BZIP2, CAB, CHM, CLASS, CMD, CSS, DOC, DOCX, DPS, ELF, EML, ET, FLV, GIF, GZ, HLP, HTML, JAR, JPG, JS, JSE, LNK, MHT, MOV, MP3, MP4, MSI, MSP, MST, PDF, PE32, PHP, PNG, POWERSHELL, PPT, PPTX, PSD, PY, RAR, RB, RTF, SWF, TAR, TIF, TXT, VBE, VBS, VSD, WPS, WSF, XLS, XLSX, and ZIP

NOTE:

Among the preceding file types, some types of files can only be sent to the local sandbox for inspection and cannot be sent to the cloud sandbox:

Image files in BMP, GIF, JPG, PNG, and TIF types
Webpage files in CHM, HTML, MHT, JS, PHP, ASP, and CSS types
Media files in MP3, MP4, AVI, MOV, and FLV types
Other files in CMD, VBE, RB, PY, POWERSHELL, JSE, WSF, LNK, TXT, and PSD types

HTM files are identified as HTML files and PPS files are identified as PPT files before sending to a sandbox for detection.

all

Indicates all file types.

Views

Anti-APT profile view

Default Level

2: Configuration level

Usage Guidelines

The file type is used as a matching condition of the anti-APT profile. A file type matches the anti-APT profile if the file type matches any condition of the profile.

By default, no file type is configured.

Example

# Set the types of files to be sent to a sandbox for detection to DOC, DOCX, PPT, PPTX, XLS, and XLSX.

<sysname> system-view
[sysname] profile type aapt name example
[sysname-profile-aapt-example] file-type DOC DOCX PPT PPTX XLS XLSX

# Set the types of files to be sent to a sandbox for detection to DOC, DOCX, HTML, PDF, PNG, PPT, PPTX, RAR, XLS, XLSX, and ZIP.

<sysname> system-view
[sysname] profile type aapt name example
[sysname-profile-aapt-example] file-type DOC DOCX HTML PDF PNG PPT PPTX RAR
[sysname-profile-aapt-example] file-type XLS XLSX ZIP