RE: blocking p2p traffic

From: InfoSec (InfoSec_at_Williams.com)
Date: 03/08/04

  • Next message: Thomas: "Re: alert messages"
    Date: Mon, 8 Mar 2004 16:14:47 -0600
    To: <focus-ids@securityfocus.com>
    
    

    Still surprised that no one has mentioned that Cisco users can use NBAR
    (network based application recognition). It works really well for us
    and takes un-needed stress out of the IDS, yet requires very little of
    the router to drop/block the p2p from getting anywhere.

    just a thought...google it! :)

    >----- Original Message -----

    >From: "Deshpande, Yashodhan" <ydeshpande@ipolicynet.com>

    >To: <focus-ids@securityfocus.com>

    >Sent: Wednesday, March 03, 2004 6:24 PM

    >Subject: blocking p2p traffic

    >

    >

    >> Hi,

    >>

    >> Any information regarding IDS/IPS software available which blocks
    p2p

    >traffic? Or in general any information regarding how to identify p2p

    >application is running and may be configure firewall to block such
    traffic.

    >In general it is observed that such applications do not work on =
    single

    >port and do port hopping. How to block them?

    >>

    >> Any inputs on the same would be appreciated.

    >>

    >>

    >> Thanks,

    >>

    >> Yashodhan

    >>

    >>
    ------------------------------------------------------------------------

    --
    >-
    >> Free 30-day trial: firewall with virus/spam protection, URL
    filtering,
    >VPN,
    >> wireless security
    >>
    >> Protect your network against hackers, viruses, spam and other risks
    with
    >Astaro
    >> Security Linux, the comprehensive security solution that combines six
    >> applications in one software solution for ease of use and lower total
    cost
    >of
    >> ownership.
    >>
    >> Download your free trial at
    >> http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
    >>
    ------------------------------------------------------------------------
    --
    >-
    >>
    >
    >
    >-----------------------------------------------------------------------
    ----
    >Free 30-day trial: firewall with virus/spam protection, URL filtering,
    VPN,
    >wireless security
    >
    >Protect your network against hackers, viruses, spam and other risks
    with Astaro
    >Security Linux, the comprehensive security solution that combines six
    >applications in one software solution for ease of use and lower total
    cost of
    >ownership.
    >
    >Download your free trial at 
    >http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
    >-----------------------------------------------------------------------
    ----
    >
    >
    ------------------------------------------------------------------------
    ---
    Free 30-day trial: firewall with virus/spam protection, URL filtering,
    VPN,
    wireless security
    Protect your network against hackers, viruses, spam and other risks with
    Astaro
    Security Linux, the comprehensive security solution that combines six
    applications in one software solution for ease of use and lower total
    cost of
    ownership.
    Download your free trial at 
    http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------------------------------
    Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
    wireless security
    Protect your network against hackers, viruses, spam and other risks with Astaro
    Security Linux, the comprehensive security solution that combines six
    applications in one software solution for ease of use and lower total cost of
    ownership.
    Download your free trial at 
    http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
    ---------------------------------------------------------------------------
    

  • Next message: Thomas: "Re: alert messages"