Download Block
Set up your custom file extension and mime type block policy. Please note that this would only be applicable for the group which has default download policy as 'Default Allow'.