.. /.Jnlp

JNLP or Java Network Launching Protocol is a XML formatted file that is used to launch Java programs over the network or internet. Java Runtime Environment (JRE) is required to run JNLP files. JNLP files can be used to download and execute remote malicious JAR files.

If feasible, block the download and execution of JNLP files and only give specific users the ability to use them. Otherwise monitor outgoing connections made by JNLP files. JNLP files should not be accepted as email attachments and should be blocked at the email gateway.