ICAP rule to bypass archive files with a certain file inside

[mikeyland1981]

I am working on creating a rule that will allow uploaded archive files to bypass the scan if they contain a certain .properties file. i am having a hard time finding how to do this. so far i have set to a particular file type, ".jar", but when i am not sure how to have it look for the .properties file and stop the cycle. Any ideas?

[asabban]

Hello,

here is an example:

1.) You create a User-Defined property of type boolean, default value "false" with a name like User-Defined.My.BypassFurtherProcessing

2.) You make an exception to the "Composite Opener" and to the "Gateway Anti Malware" rule sets. The first rule should say

"If User-Defined.My.BypassFurtherProcessing equals true => Stop Rule Set"

3.) Into the Composite Opener you make a rule that says

"If Body.FullFileName matches ABC_*.jar|*ABCChecksum.properties => Set Property Value: User-Defined.My.BypassFurtherProcessing"

By doing so MWG will check if the Filename was ABC_*.jar and there is an archive member ABCCHecksum.properties. If so the User-Defined Property is set to true, which will exclude further execution of Composite Opener and GAM filtering.

Best,
Andre