Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Release notes

Troubleshooting

Guides

Third-party software Contact us

File Download Control

The Cloud Protection module offers File Download Control as one of its control policies to block file downloads from cloud applications while still allowing you to access them. You can use preconfigured filters or a custom filter to block file downloads.

Preconfigured filters

Block downloads from:

  • All non-Microsoft365 apps
  • All non-Zoho apps
  • All non-Google Workspace apps
  • All Google Workspace apps
Custom filter

Block downloads based on custom criteria:

  • Domain name
  • Referer
  • File name

Creating a new File Download Control policy

  • Select Cloud Protection from the modules drop-down menu at the top.
  • Go to Configuration > Control Policies > File Download Control.
  • Click +Add Policy.
  • Enter a suitable Policy Name and Policy Description.
  • Assign a Tag. Tags can be used to group control policies based on the category of the cloud suite.
  • Under Filter, enable the preconfigured filters or the custom filter option by clicking the toggle button below.
    • For preconfigured filters, enabling the toggle button will block file downloads as per the predefined criteria.
    • For custom filters, after enabling the toggle button, click Configure criteria. In the Configure File Download Control criteria pop-up window that opens, add as many criteria as required by clicking the + button, and click Done.

    Note: Currently, you can choose Domain name, Referer, and File name as the custom criteria. The file download will be blocked if it matches any of the added criteria.

  • Click Save to create the File Download Control policy.

Refer to the examples below for an understanding of how to use File Download Control effectively:

Example 1: Allow downloads only from Microsoft apps, such as Outlook, Teams, and OneDrive

  • Follow the steps mentioned above to create a new policy.
  • Under Filter, enable only the Non-Microsoft365 Apps toggle button.
  • Click Save.

Now, file downloads will be blocked from all cloud apps except for Microsoft365 apps.

Example 2: Block downloads from Google apps, such as Gmail, Drive, and Docs

  • Follow the steps mentioned above to create a new policy.
  • Under Filter, enable only the Google Workspace toggle button.
  • Click Save.

Now, file downloads will be blocked from all Google Workspace apps.

Example 3: Block executable file downloads from all cloud applications and all downloads from xyz.com

  • Follow the steps mentioned above to create a new policy.
  • Under Filter, enable only the Custom toggle button.
  • Click Configure criteria.
  • In the pop-up window that opens, select Filename from the criteria drop-down, Contains from the conditions drop-down, and enter exe.
  • Click the + button, select Referer from the criteria drop-down, Contains from the conditions drop-down, and enter xyz.com.
  • Click Save.

Now, file downloads are blocked for the given conditions.

File Download Control

File Download Control

Limitations of File Download Control

  • Image files downloaded through JavaScript or from the cache will not be blocked.
  • When deep packet inspection is configured in mixed mode, there may be lower accuracy in blocking file downloads.
  • File download requests made in WhatsApp and Telegram will not be blocked.
  • File download requests from web applications that use background Service workers will not be blocked.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2025 Zoho Corporation Pvt. Ltd. All rights reserved.