Check Point HARMONY R81 Administration Manual page 340

n Emulate and suspend original file until emulation completes - Send files for
emulation. Users only receive the files after the emulation finishes and the file was
found to be safe.
n Emulate original file without suspending access - Send files for emulation. Users
can download and access the file while it is tested. The administrator is notified if
files are found to be malicious.
n Allow Download - No emulation or extraction. The download is allowed.
n Block Download - No emulation or extraction. The download is blocked.
4. If files are extracted, select the Extract Mode, which is the format of the extracted
document that users can see during the emulation.
n Extract potentially malicious elements -The file is sent in its original file type but
without malicious elements.
n Convert to PDF - When relevant, files are converted to PDF.
5. Click OK.
To change the setting for a specified file type, such as.zip or .pdf:
1. In a Harmony Endpoint Threat Extraction and Threat Emulation rule, right-click the Web
Download Protection Action and select Edit Shared Action.
2. Click Override default file action per file type.
3. Select a file type.
4. Click in the File Action column to select a different action for that file type.
5. Click in the Extraction Mode column to select a different extraction mode for the file type.
6. Click OK.
R81 Harmony Endpoint Server Administration Guide | 340
Web Download Protection