Global Configuration

The processing of file identification exceptions specifies the action for abnormal file types. You are advised to use the default global file blocking configuration.

Context

Because the device does not support the block action for NFS, if the application is NFS and the action is block, the device will take the alert action.
If the application is IMAP or POP3 and the action is block, the device will delete attachments.

Procedure

Access the system view.
system-view
Set the action for malformed files.
file-block malformed action { alert | allow | block }

The default action for malformed files is allow.

The FW cannot implement file blocking, data filtering, and antivirus detection on the damaged files.
Set the action for files with unmatched file name extensions.
file-block false-extension action { alert | allow | block }

The default action for files with unmatched file name extensions is allow.

If the file type and file name extension are not matched and the action is allow or alert, the FW implements file blocking, data filtering, and antivirus detection by file type.
Set the action for unknown types of files.
file-block unknown-type action { alert | allow | block }

The default action for unknown types of files is allow.

If the file type cannot be identified and no file name extension exists, the FW does not implement file blocking, data filtering, and antivirus detection.