Endpoint Protection

 View Only
  • 1.  Regular expression

    Posted Dec 02, 2013 06:23 AM

    I want to block execution of files haveing multiple extension. E.g .pdf.exe, .doc.exe, .pdf.vbs etc

    I need to desing regulae expression for the same. Please help



  • 2.  RE: Regular expression



  • 3.  RE: Regular expression
    Best Answer

    Posted Dec 02, 2013 07:36 AM

    Thanks Brian. Just gor it solved. A very old document came to the rescue.

    http://www.symantec.com/business/support/index?page=content&id=HOWTO16465&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D1385985166361W80LU69t3LqADAB8gLUlAP9fk12igywD2y2fl

     

    Below mentioned regex solved it,

     

    .*\.[pdxzrjma][dolpiv][fcstprgei34]\.[evbc][xbao][estm]

     

    I was missing a dot in the begining of the expression. Anyways.. Thansk a lot for your response.



  • 4.  RE: Regular expression

    Posted Dec 02, 2013 07:37 AM
      |   view attached

    The attached is helpful as well

     

    Attachment(s)