The administrator must allow ICAToolkitSetup_64.rar—or its trusted source domain—in the organization’s firewall, proxy, DLP, or web-security policy; this policy-block message generally cannot be overridden by unblocking the file locally.
The matching .rar transfer case was resolved by adding an exception in the software policy, firewall, or proxy that was blocking the file type ^1^.
What to send to IT/security
Provide:
- Exact filename:
ICAToolkitSetup_64.rar
- Full download or upload URL
- Screenshot and time of the failure
- Whether other
.rar files are blocked
- Whether it fails on both the corporate network and another approved network
- Request to inspect web gateway, proxy, endpoint protection, and DLP logs
- Request for either:
- A narrowly scoped exception for this file/source after security validation, or
- An approved internally hosted copy
Do not rename the archive, change its extension, or disable security controls to bypass the policy. Because this archive contains a setup toolkit, obtain it from the software vendor or an official organization source rather than an unverified mirror.
Identify which control generated the block
If the message appears before the file is saved
This is not Windows’ downloaded-file “Unblock” mechanism. Check managed Edge policy:
- Open
edge://policy in Microsoft Edge.
- Select Reload policies.
- Check
DownloadRestrictions and export the policy list for IT.
- Also test a harmless file of another type from the same site:
- Only
.rar fails: likely a file-type or content rule.
- Every file fails: likely a broader download, site, account, or gateway rule.
- Upload and download both fail: prioritize the proxy, DLP, endpoint-security, or website policy rather than Windows Attachment Manager.
DownloadRestrictions can block dangerous, potentially dangerous, or all downloads, and a mandatory Edge policy cannot be changed by the user ^2^. Microsoft’s Edge troubleshooting guidance also recommends checking edge://policy, security logs, proxy controls, and whether the problem is specific to one file type ^3^.
If IT confirms Edge is generating the block, the administrator can review Administrative Templates → Microsoft Edge → Allow download restrictions. An exception should be limited to the trusted file type and source where possible; Edge provides ExemptFileTypeDownloadWarnings for site-specific file-type exemptions ^4^.
If no relevant Edge policy appears, IT should inspect the corporate proxy/firewall and endpoint-security logs. Trying another browser does not bypass a network-level rule.
If the file was saved and Windows blocks opening it
Only in this case:
- Scan the archive with Microsoft Defender or the organization’s approved scanner.
- In File Explorer, right-click the file and select Properties.
- On General, select Unblock, then Apply → OK.
- If Unblock is absent, the organization may have hidden it through Attachment Manager policy; contact IT rather than changing policy locally.
Windows records where downloaded files originated and can block files from untrusted locations ^5^. Administrators can also hide the Unblock control through the Attachment Manager policy ^6^.
References
- Problem with rar File Transfer Blocked - Microsoft Q&A
- DownloadRestrictions
- Troubleshoot download failures
- Identify and interrupt downloads of potentially dangerous files
- Information about the Attachment Manager in Microsoft Windows | Microsoft Support
- Policy CSP - AttachmentManager