Blocking or monitoring file transfers using the blacklist
You can block or monitor file downloads and file uploads by specifying the file extension and, optionally, file contents in the blacklist. Symantec Web Gateway does not verify that the contents of the file match the extension.
If a file transfer occurs that matches the blacklist entry, Symantec Web Gateway checks for a matching policy for the computer. The Spyware Severity and Spyware Category in the matching policy determine the action that Symantec Web Gateway takes on the file transfer.
To block or monitor file transfers using the blacklist
In the Web GUI, click Policies > Blacklist.
Click Add a Blacklist Entry.
Type a Name for the blacklist entry.
The name appears on the blacklist page and in reports.
For Block Type, click Block by File Extension.
Optionally, click a File Type to populate File Extension with commonly used extensions for that file type.
Type file extensions to match in the File Extension box.
If you click a File Type, you can add or delete file extensions. Separate each file extension with a comma. The asterisk wildcard is not valid for File Extension. Omit periods when typing a file extension.
Optionally, for Keyword you can type text to match in the contents of files.
Only files with the extensions that you specify that contain at least one of the keywords match. Separate multiple keywords with commas. The asterisk wildcard is not valid for Keyword.
Under File Direction, click one of the following options:
Block the matching files that users attempt to upload to a remote computer.
Block the matching files that users attempt to download.
Block the matching files that users attempt to upload or download.
In the Description box, type a description.
This Description appears on the blacklist page and in reports.
Click a Severity.
The blacklist Severity relates to the policy Spyware Severity. The action that you set for Spyware Severity in a matching policy applies to the blacklist entry. The Severity is also recorded and used in reports.
Click a Category.
The blacklist Category relates to the policy Spyware Category. The action that you set for Spyware Category in a matching policy applies to the blacklist entry. The Category is also recorded and used in reports.
Imported Document ID: HOWTO54142
Subscribing will provide email updates when this Article is updated. Login is required.