Forum Discussion
Torti
Altostratus
To check for an extension is no save way to allow only pdf files. You have to look into the file or a pdf-file can be something else.
Mike_Maher
Dec 16, 2013Nimbostratus
Agreed. This is just checking that someone doesn't accidentally submit something else, you want to use the AV integration to check for malicious files. I am not sure if the the no .exe's check box actually looks at the file or just the extension.
Torti - From a Big-IP standpoint do you have any suggestions on how to check into the file to determine what it really is? I don't know of any way to do that on the Big-IP but would be interested in any thoughts on the subject.