Re: [fw-wiz] Blocking we browsing completely and allowing only Skype out to the Internet

Skype is fairly aggressive when it's looking for open outbound ports
(i.e. not limited to using 80 and 443). I'd lock the firewall down
and use a packet trace to determine its search sequence.

I suspect you could also use URI inspection. Both FW-1 and PIX/ASA
support this. You could also use a proxy. This may help work around
HTTPS.

On 10/23/07, Siju George <sgeorge.ml@xxxxxxxxx> wrote:
Hi,

Is anybody doing Something like this on any of their firewalls?

i.e blocking all web browsing and at the same time allowing only skype
to the outside world?

Could you please let me know how you do that?

Thank you so much

Kind Regards

Siju
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards