How to block downloads by file extension? - TID2954488 (last modified

I entered a rule HTTP://*/*.exe

It doesn't do anything. You still can download exe files from anywhere.
Also, another school district employee said he uses the rule
HTTP://*.*/*.exe so I tried that, but still it doesn't block exe's from
being downloaded. What am I missing?