Intrusion Prevention

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



Expand all | Collapse all

Block messneger & torrent

Jump to Best Answer
  • 1.  Block messneger & torrent

    Posted 01-03-2010 05:30

    i need to block  yahoo messenger & torrent  

    i have  a standalone idp

    can someone help me how to do that ?    



  • 2.  RE: Block messneger & torrent

    Posted 01-07-2010 02:13

    Hi there ?



  • 3.  RE: Block messneger & torrent

    Posted 01-08-2010 08:43

    Short answer is this should be done at the firewall.  A default firewall policy of deny all will block those things because you will not have a rule in the firewall to allow them.  Torrent is hard to block becasue it can use random ports for yahoo messenger the software client uses defined port that you can block.  As for the yahoo messenger web app you will need to block domains or have something like bluecoat that does content filtering.



  • 4.  RE: Block messneger & torrent
    Best Answer

     
    Posted 01-20-2010 05:33

    Hi

     

    What IDP box and version do you have?

    The new feature in IDP 5.0 - application identification - allows to use IDP as an application firewall (particularly, the new APE rulebase is used for that). This feature was designed to block/allow specific applications on any port, so you probably should try it, as long as you already have IDP. Note however that for older IDPs (200, 600,...) it is not recommended to use this feature in production (see release notes).

     

    - pk