Wasfi_182818
Nimbostratus
NimbostratusHow does the ASM deal with devious file types
Hi
For file types that pretend to be what they not really are. for example an exe pretending to be a gif, how does the ASM deal with this violation?
Kindly Wasfi
Forum Discussion
4 Replies
Vijith_182946Cirrostratus
Not sure though, I would think of ICAP in this case.
Wasfi_182818Hi Vijith I agree. I think this is a job for the ICAP server. Thank you. Kindly Wasfi
Hussein_Ghazy_3Yep i think it is the ICAP. We forward all uploaded files to ICAP to check them. Not sure if that can be done by the ASM....
Erik_NovakEmployee
ASM verifies MIME types. So simply changing a file extension from .exe to .gif will not defeat true file type detection. The same concept applies to allowing or disallowing file uploads.