I think you should not Use the Content Extensions, but should block them with Mime type Just like this For Execute content (Having .exe extension) : "application/octet-stream" for Compressed content (Having .zip): "application/zip" Include them in your Custom Content Group.