Security: impossible to restrict all ".zip" and ".mov" TLD to the Tenant Allow/Block list

Please see screenshot below. Maybe I'm doing something wrong, but there is no help available for the syntax to use (the linked page in the tooltip doesn't contain that information).