# Disallowed file type extensions

Type of document: Reference
Product: F5 WAF for NGINX

---


This page describes the disallowed file type extensions feature for F5 WAF by NGINX.

The following file types are disallowed by default:

- bak, bat, bck, bkp, cfg, conf, config, ini, log, old, sav, save, temp, tmp
- bin, cgi, cmd, com, dll, exe, msi, sys, shtm, shtml, stm
- cer, crt, der, key, p12, p7b, p7c, pem, pfx
- dat, eml, hta, htr, htw, ida, idc, idq, nws, pol, printer, reg, wmz