Skip to content

Commit d1182f5

Browse files
authored
[Gateway/DLP] HTTP policy supported files (#17579)
1 parent 5504b01 commit d1182f5

File tree

4 files changed

+59
-13
lines changed

4 files changed

+59
-13
lines changed

src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/common-policies.mdx

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,9 @@ sidebar:
66
head:
77
- tag: title
88
content: Common DLP policies
9-
109
---
1110

12-
import { GlossaryTooltip, Render } from "~/components"
11+
import { GlossaryTooltip, Render } from "~/components";
1312

1413
The following in-line DLP policies are commonly used to secure data in uploaded and downloaded files.
1514

@@ -24,6 +23,8 @@ The **Allow** action functions as an implicit logger, providing visibility into
2423

2524
<Render file="gateway/policies/block-file-types" />
2625

26+
For more information on what file formats DLP can scan, refer to [Supported file types](/cloudflare-one/policies/data-loss-prevention/#supported-file-types).
27+
2728
## Block uploads/downloads for specific users
2829

2930
You can configure access on a per-user or group basis by adding [identity-based conditions](/cloudflare-one/policies/gateway/identity-selectors/) to your policies. The following example blocks only contractors from uploading/downloading Financial Information to file sharing apps.

src/content/docs/cloudflare-one/policies/gateway/http-policies/common-policies.mdx

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,9 @@ sidebar:
66
head:
77
- tag: title
88
content: Common HTTP policies
9-
109
---
1110

12-
import { Render } from "~/components"
11+
import { Render } from "~/components";
1312

1413
The following policies are commonly used to secure HTTP traffic.
1514

@@ -53,7 +52,7 @@ Gateway [evaluates Do Not Inspect policies first](/cloudflare-one/policies/gatew
5352

5453
:::note
5554

56-
You can select either individual applications or the entire Do Not Inspect set, which will update as new applications are added.
55+
You can select either individual applications or the entire Do Not Inspect set, which will update as new applications are added.
5756
:::
5857

5958
## Check device posture
@@ -97,6 +96,8 @@ When accessing origin servers with certificates not signed by a public certifica
9796

9897
<Render file="gateway/policies/block-file-types" />
9998

99+
For more information on supported file types, refer to [Download and Upload File Types](/cloudflare-one/policies/gateway/http-policies/#download-and-upload-file-types).
100+
100101
## Block Google services
101102

102103
To enable Gateway inspection for Google Drive traffic, you must [add the Cloudflare certificate to Google Drive](/cloudflare-one/connections/connect-devices/warp/user-side-certificates/install-cloudflare-cert/#google-drive-for-desktop).

src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx

Lines changed: 48 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -460,12 +460,57 @@ Use this selector to match against a domain and all subdomains -- for example, i
460460
### Download and Upload File Types
461461

462462
:::caution[Deprecated selectors]
463-
464463
The **Download File Types** and **Upload File Types** selectors supersede the **Download File Type** and **Upload File Type** selectors. Gateway will still evaluate policies with the previous selectors. However, Cloudflare recommends migrating any policies with deprecated selectors to the new corresponding selectors.
465-
466464
:::
467465

468-
These selectors will scan file signatures in the HTTP body. You can select from file categories or specific file types, including executables, archives and compressed files, Microsoft 365/Office documents, and Adobe files.
466+
These selectors will scan file signatures in the HTTP body. You can select from file categories or specific file types, such as executables, archives and compressed files, Microsoft 365/Office documents, and Adobe files:
467+
468+
<Details header="Supported file types">
469+
470+
**Compressed**
471+
472+
- 7-Zip archive (`.7z`)
473+
- `bzip2` archive (`.bz2`)
474+
- GNU Gzip archive (`.gz`)
475+
- Microsoft Cabinet file (`.cab`)
476+
- Microsoft Compiled HTML Help file (`.chm`)
477+
- RAR archive (`.rar`)
478+
- `xz` archive (`.xz`)
479+
- ZIP archive (`.zip`)
480+
481+
**Documents**
482+
483+
- Microsoft Office/365 files
484+
- Word document (`.doc`, `.docx`, `.docm`)
485+
- Excel spreadsheet (`.xls`, `.xlsx`, `.xlsm`)
486+
- PowerPoint presentation (`.ppt`, `.pptx`, `.pptm`)
487+
- PDF document (`.pdf`)
488+
489+
**Executable**
490+
491+
- Dynamic-link library (DLL) file (`.dll`)
492+
- Executable and Linkable Format (ELF) file (`.elf`)
493+
- Java archive (JAR) package (`.jar`)
494+
- Java class file (`.class`)
495+
- Mach object (Mach-O) file (`.macho`)
496+
- Microsoft Windows installer (`.msi`)
497+
- Microsoft Windows executable (`.exe`)
498+
499+
**Image**
500+
501+
- Adobe Photoshop document (`.psd`)
502+
- Bitmap image (`.bmp`)
503+
- GIF image (`.gif`)
504+
- Icon file (`.ico`)
505+
- JPEG image (`.jpg`, `.jpeg`)
506+
- PNG image (`.png`)
507+
- WebP image (`.webp`)
508+
509+
**Other**
510+
511+
- BitTorrent file (`.torrent`)
512+
513+
</Details>
469514

470515
| UI name | API example |
471516
| ------------------- | --------------------------------------------------- |
Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,12 @@
11
---
22
{}
3-
43
---
54

65
## Block file types
76

87
Block the upload or download of files based on their type.
98

10-
| Selector | Operator | Value | Logic | Action |
11-
| ------------------ | -------- | ------------------------------------- | ----- | ------ |
12-
| Upload File Type | in | Microsoft Office Word Document (docx) | And | Block |
13-
| Download File Type | in | PDF (pdf) | | |
9+
| Selector | Operator | Value | Logic | Action |
10+
| ------------------ | -------- | --------------------------------------- | ----- | ------ |
11+
| Upload File Type | in | _Microsoft Office Word Document (docx)_ | And | Block |
12+
| Download File Type | in | _PDF (pdf)_ | | |

0 commit comments

Comments
 (0)