Block User download executable file extensions

[CKs 0]

Dear Team,

We try to create a policy to block users download executable files, as the picture below Eset can deny users downloading executable with browser as well.

 

Create a Policy

Eset can deny users downloading executable with browser

 

But If  user download with the cmd command Eset cannot deny this behavior:

User can download executable file by CMD command

 

Please give me advice on how can we can deny users download the file in this situation.

Thanks Teams!

[Marcos 5,070]

The app you run may need to be marked as a browser in the web access protection setup. Also it's not cmd.exe itself which downloads files but you must have run a different command/app.

Also it is not possible to block download completely, e.g. if a php script is used to download which is typical on the Internet, the file would not be blocked.