Intrusion Prevention

  • 1.  Block messneger & torrent

    Posted 01-03-2010 05:30

    i need to block  yahoo messenger & torrent  

    i have  a standalone idp

    can someone help me how to do that ?    



  • 2.  RE: Block messneger & torrent

    Posted 01-07-2010 02:13

    Hi there ?



  • 3.  RE: Block messneger & torrent

    Posted 01-08-2010 08:43

    Short answer is this should be done at the firewall.  A default firewall policy of deny all will block those things because you will not have a rule in the firewall to allow them.  Torrent is hard to block becasue it can use random ports for yahoo messenger the software client uses defined port that you can block.  As for the yahoo messenger web app you will need to block domains or have something like bluecoat that does content filtering.



  • 4.  RE: Block messneger & torrent
    Best Answer

    Posted 01-20-2010 05:33

    Hi

     

    What IDP box and version do you have?

    The new feature in IDP 5.0 - application identification - allows to use IDP as an application firewall (particularly, the new APE rulebase is used for that). This feature was designed to block/allow specific applications on any port, so you probably should try it, as long as you already have IDP. Note however that for older IDPs (200, 600,...) it is not recommended to use this feature in production (see release notes).

     

    - pk