Enable file blocking
In addition to category-based web filtering, Forcepoint Web Security Cloud allows you to block users from accessing specific file types. File types can be blocked based on extension, or based on true file type. True file type blocking scans the file itself to determine its format, regardless of its extension.
File blocking can be configured per web category, or per user and group. For example, you can enable the Sports category, but prevent users from downloading multimedia files from sites in that
category.
Important: Archived/compressed files are not extracted to determine if the contents contain a file that should be blocked based on the type or extension. However, they are
inspected for malware. Archived and compressed files can be blocked, if needed, in which case, all files contained in those archived files are blocked.
Configure file blocking via the File Blocking tab of your policy. For more information, see File Blocking tab in the Web Security Cloud help.