File Types

• File Name Characters—File name up to 64 bytes in length are supported.
• File Operations—You can upload and download files using HTTP and HTTPS (no FTP or SMTP) using:
  • (DLP 3.0.1 and earlier releases) HTTP/1.1
    Some applications, such as SharePoint and OneDrive, use HTTP/2 by default. To use HTTP/2 files with HTTP/1.1, you need to create a decryption profile and a Security policy rule to strip out the application-layer protocol negotiation (ALPN) extension in headers. See enable Enterprise DLP for more information.
  • (DLP 3.0.2 and later releases) HTTP/1.1 and HTTP/2
• File Size—The maximum supported file size is dependent on the application. Review the supported applications for more information.
• Data Flow—File uploads and downloads are supported. Review the supported applications to learn the data flow direction supported for each application.
  Enterprise DLP doesn’t support maintaining a session connection to continue inspection if a file download is paused. The DLP cloud service inspection is terminated for the file if the download operation is paused.
• Concurrent File Uploads—25 concurrent file uploads are supported.
• File Types—Enterprise DLP supports inspection of the following file types.
  • Microsoft Office (.doc, .docx, .ppt, .pptx, .xls, .xlsx)
  • Microsoft Visio (.vsd, .vsdm, .vsdx)

    Requires Application and Threats content release 8656-7766 or later versions installed on Panorama and managed firewalls, or Strata Cloud Manager deployment.
  • .csv
  • .pdf
  • .rtf
  • .tsv
  • .txt
• Image File Types—Enterprise DLP supports extraction and inspection of the following image file types using Optical Character Recognition (OCR).

  • .jpg
  • .jpeg
  • .png
  • .tif
  • .tiff
• Source Code File Formats—Enterprise DLP supports inspection of the following source code file formats.
  • Cfamily—C, C++, C+, C#, Objective C
  • Go
  • HTML
  • java
  • javascript
  • perl
  • powershell
  • python
  • r
  • ruby
  • vbs
  • verilog
  • vhd1
  • x86_assembly
• ZIP Files—Enterprise DLP supports inspection of ZIP and 7Z (7-ZIP file archiver) files containing the supported file types listed above.
  Enterprise DLP supports multilevel compressed files.

  • Prisma Access and NGFW (Managed by Panorama or Strata Cloud Manager)—Up to four levels of file compression is supported. The total file size for all uncompressed files may not exceed the maximum supported file size for each application.
  • Data Security—No maximum number of file compression levels. The total file size for all uncompressed files may not exceed the maximum supported file size for each application.
• Response—Block and Alert actions are supported for HTTP and HTTPS files. However, the Block page doesn’t display the name of the file that the managed firewall blocked.