Configure Executable File Download in SWA

Step 1.2. Click Add Category to create a new Custom URL Category.

Step 1.3. Enter Name for the new category.

Step 1.4. Define the domain or subdomains that you want to block file downloads (in this example, cisco.local and all its subdomains is used).

Step 1.5. Submit the changes.

Image - Create Custom URL Category

Tip: For more information on how to configure Custom URL Categories, refer to Configure Custom URL Categories in Secure Web Appliance.

Caution: Decrypting a large number of URLs can lead to performance degradation.

Step 2.1. From the GUI, navigate to Web Security Manager and choose Decryption Policies

Step 2.2. Click Add Policy.

Step 2.3. Enter Name for the new policy.

Step 2.4. (Optional) Select the Identification Profile where this policy applies.

Tip: (Optional) If you want to apply the policy for all users (even if they are not authenticated), choose All Users (authenticated and unauthenticated users).

Step 2.5. From the Policy Member Definition section, click the URL Categories links to add the Custom URL Category.

Step 2.6. Select the URL Category created in Step 1.

Step 2.7. Click Submit.

Image - Create a Decryption Policy

Step 2.8. In the Decryption Policies page, click the URL Filtering for the new policy.

Image - Select the URL Filtering

Step 2.9. Choose Decrypt as the action for Custom URL Category.

Step 2.10. Click Submit.

Image - Set Decrypt as Action

Step 3.2. Click Add Policy.

Step 3.3. Enter Name for the new policy.

Step 3.4. (Optional) Select the Identification Profile that you need this policy applies to.

Tip: (Optional) If you want to apply the policy for all users even if they are not authenticated, choose All Users (authenticated and unauthenticated users).

Step 3.5. From Policy Member Definition section, Click URL Categories links to add the Custom URL Category.

Step 3.6. Select the URL Category that was created in Step 1.

Step 3.7. Click Submit.

Image - Access Policy

Tip: For reporting purposes, it is best to choose a name that is not the same as any other access or decryption policy.

Step 3.8. In the Access Policies page, ensure the URL Filtering action is set to Monitor.

Step 3.9. In the Access Policies page, click Objects for the new policy.

Image - Select the Objects

Step 3.10. From the drop-down menu, choose Define Custom Objects Blocking Settings.

Image – Define Custom Objects

Step 3.11. Select Executable Code to select the types of Objects to block.

Step 3.12. Select Installers, to select the types of Objects to block.

Step 3.13. Additionally, you can enter the MIME type, which is the type of file(s) you want to block in the Custom MIME Types section.

Image - Configuring Objects to Block

Tip: To view the list of the MIME types, click Object and MIME Type Reference.

Step 3.14. Submit.

Step 3.15. Commit changes.