Forum Discussion

Milko_125350's avatar
Milko_125350
Icon for Nimbostratus rankNimbostratus
Oct 10, 2013

The ASM is possible verify the format file?

Hi people,

 

I need verify the format file but the ASM only see the "content-type" in the header, is possible to know the file format differently?

 

Content-Type: application/pdf

 

Thanks.

 

2 Replies

  • rob_carr's avatar
    rob_carr
    Icon for Cirrocumulus rankCirrocumulus
    Oct 11, 2013

    ASM can't distinguish between file types in most cases, with the exception being the sensitive data feature. What it can do is tell the difference between binary/non-binary content being uploaded.

     

    What you might be able to do (if you are checking Requests, that is) is enable the ICAP forwarding capability, and pass the file to a service which can evaluate the format of an uploaded object, and then let the ASM know if the file violates it's stated type. Note that the examining service will have to tell the ASM that a virus has been detected, if a file differs from it's stated type, since we are re-purposing an ASM feature.

     

  • Milko_125350's avatar
    Milko_125350
    Icon for Nimbostratus rankNimbostratus
    Oct 13, 2013

    Thanks Rob but I need upload file of type pdf, jpg, tif. Any different files is not upload. I configured the "parameter" with regex.

     

    The feature "sensitive data" is not valid in this environment. I have enabled the ICAP forwarding, thi files is forwarder to the antivirus server but this antivirus don´t detect the format of file. Which service for evaluate the files?.

     

    Thanks Rob for your response....