Bypassing rule for ISO files

[mokaz]

Hi all,

Would some of you have examples of rules creation within KSIG ? My goal would be not the scan ISO images bigger than 100MB.
I came with this although was wonder if the mime type isn't perhaps to "broad" so to speak:

Bypass Rule Traffic filter HTTP Content-Length, KB     greater than or equal to 100240 KB --- AND --- MIME type of HTTP message     application/octet-stream It works as intended although if anyone might have better or sharper, it's welcome. Let me know, Kind regards, M.