hi,

i have seen lots of forums and they speak different solutions. how can i block specific extension downloads on tmg? please anyone advise a good solution,as i am confused of which solution i will go.

Hi,

there are two ways to block specific extensions:
1) you can use the settings in a Firewall Policy rule to block access to specific MIME types. Forefront TMG has some builtin categories for different MIME types.
http://technet.microsoft.com/en-us/library/bb794766.aspx
2) IMHO the better/efficiently way is to use the HTTP Filter of Forefront TMG:
http://www.isaserver.org/tutorials/Configuring-Forefront-TMG-HTTP-Filter.html

Hello,

Right-click on your HTTP rule and then click on configure HTTP. Once done, click on Extensions.

Once done, configure what you want to block and allow.

i have tried what they mention in the link,but the rule does not apply. i have done the following:

 in my allow rule, i clicked on configure http, and in the extensions option,i selected block specified extensions-then i added extension .mp3. but users can still download mp3.

please advise if you can.

thank for a lot for your precious help. really appreciate it.

Hi,

Thank you for the post.

Please look into the TMG logging to check if there is any other rule above this rule that allow the http access. And do you have configure the Methods in http policy?

Regards,

Thank for the Post