Free web filter for blocking certain file types?

[WilliamUT]

Im really frustrated that Microsoft did not include this with their ISA Server. It seems like such a simple thing. Are there any free web filters out there to block certain file types? Right now im forced to block all downloads through group policy. I have users that need to download .pdf's but I dont want to unlock everything and give them access to download .mp3's at the same time. I have looked around on the web and came accross the GFI, SurfControl, and N2H2 products and their pricing is absurd for such a small thing to do. Im paying more to block files than i did for the ISA Server itself and it should be a function that should be built in already!! Is there any kind of free web filters to do this one simple task? Thanks

 

[What90]

You can create a defintion in ISA for certain attachment files such as .MP3, .Exe etc in Policy Elements, Content Groups.

The create a Site and Contents rule for all users/groups to block access to that defination rule.

Works fine for me and stops those pesky users sucking up all the bandwidth on pulling down the lastest one from Ms Spears;-)

 

[WilliamUT]

Thanks for the help but where do you create the rule to block .exe's and .mp3's etc?

 

[What90]

As per my post above, In ISA MMC goto Policy Elements, Content Groups - right click on Content Groups and select add. Create a Group call Blocked Downloads. Pop in a description then click the add button type in .MP3 then ok
It will be added to the list. You can then add in .Exe, .CMD, .Bat, .PIF,. ink, .VBS

Once you've added all the files you need to block, click ok and close the new content group.

Now go to Site and Contents and create a Site and Contents rule which references the new Blocked Downloads (Content Group) for either all or defined users/groups.
Select deny access to that (those define files in the Blocked Downloads list) Content Group.
I set the rule to deny and re-direct the request to our Internet site and the IT policy on banned downloads.

Then try to get a user account that you've blocked to access a web site. The user now should not be able to access/download the block file types.

The link below is a good guide to what content groups do.

http://www.isaserver.org/tutorials/Understanding_and_Configuring_ISA_content_groups.html

 

[WilliamUT]

Thanks for the help. One problem though when im scrolling through the list (in site and contents rule) of what i want to block none of the content groups show up in the list only destination sets show up...any reason why this may be?

 

[WilliamUT]

nevermind i figured it out! Thanks for all your help it works great!