Threat Emulation Supported File Types

What can I do here?

Use this window to select the file types that the Security Gateway sends for emulation.

File Type Settings

You can configure the Threat Emulation Action and Emulation Location for each file type scanned by the Threat Emulation blade.

In the File Types section, select one of these:

• Process all enabled file types - This option is selected by default. Click the blue link to see the list of supported file types. Out of the supported file types, select the files to be scanned by the Threat Extraction blade.

  Note - you can find this list of supported file types also in Manage & Settings view > Blades > Threat Prevention > Advanced Settings > Threat Extraction > Configure File Type Support.

• Process specific file type families - Click Configure to change the action or emulation location for the scanned file types.

  To change the emulation action for a file type, click the applicable action in the Action column and select one of these options:

  • Inspect - The Threat Emulation blade scans these files.
  • Bypass - Files of this type are considered safe and the Software Blade does not do emulation for them.

  To change the emulation location for a file type, click Emulation Location and select one of these options:

  • According to gateway - The Emulation Location is according to the settings defined in the Gateway Properties window of each gateway.
  • Locally - Emulation for these file types is done on the gateway.
  • ThreatCloud - These file types are sent to the ThreatCloud for emulation.