How to disable downloading files in exe and other formats from https sites?

In the "Web filtering" module of WFilter NGF (WSG Internet behavior Management Gateway), we can set filtering rules for "file downloads", such as banning exe executables or downloading compressed files. As shown below:

Various file types have been integrated in WFilter, you only need to set the relevant types to "prohibited", and various formats under this category can be banned. WFilter file download is prohibited, not only file extension can be prohibited, but also can be banned based on content-type. As shown in the following figure, in the "compressed file class", you can not only prohibit zip, bz2 and other file extension formats, but also prohibit various content-type, such as application/zip.

After the above configuration, the relevant files can be blocked when downloading the relevant files from the http page. As shown below:

It is important to note that downloads to https sites are not controlled by this option by default. Because the communication of https is encrypted, if ssl monitoring is not enabled, WFilter will not detect the transmission content of https. If you want to block web downloads from https, you need to turn on the "ssl Monitoring" module. As shown in the following figure, "ssl Monitoring" is enabled in "web Monitoring". To enable ssl monitoring, you also need to import the ca certificate on the client. For more information, please see http://wiki.imfirewall.com/SSLInspect.

After the above steps, you can filter the file format for web downloads of ssl. The effect is as follows:

The following figure shows the real-time blocking record in WFilter (either http or https can implement file format filtering).