Re: blocking p2p traffic
From: Jens Matthes (jens_at_rockefeller.edu)
Date: 03/09/04
- Previous message: Byron Sonne: "Re: nids for ipv6"
- In reply to: InfoSec: "RE: blocking p2p traffic"
- Next in thread: Jeff Kell: "Re: blocking p2p traffic"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: <focus-ids@securityfocus.com> Date: Mon, 8 Mar 2004 19:52:05 -0500
We are using Packethound
(http://www.palisadesys.com/products/packethound/index.shtml) with very good
success to block P2P and other undesired network traffic. It can recognize
hundreds of application protocols and is very flexible what policies you
want to enforce and how (block, log, throttle ...)
Definitely worth a look.
Jens Matthes
Network Security Specialist
Information Technology
The Rockefeller University
New York, NY
E-mail: jens@mail.rockefeller.edu
----- Original Message -----
From: "InfoSec" <InfoSec@Williams.com>
To: <focus-ids@securityfocus.com>
Sent: Monday, March 08, 2004 5:14 PM
Subject: RE: blocking p2p traffic
Still surprised that no one has mentioned that Cisco users can use NBAR
(network based application recognition). It works really well for us
and takes un-needed stress out of the IDS, yet requires very little of
the router to drop/block the p2p from getting anywhere.
just a thought...google it! :)
>----- Original Message -----
>From: "Deshpande, Yashodhan" <ydeshpande@ipolicynet.com>
>To: <focus-ids@securityfocus.com>
>Sent: Wednesday, March 03, 2004 6:24 PM
>Subject: blocking p2p traffic
>
>
>> Hi,
>>
>> Any information regarding IDS/IPS software available which blocks
p2p
>traffic? Or in general any information regarding how to identify p2p
>application is running and may be configure firewall to block such
traffic.
>In general it is observed that such applications do not work on =
single
>port and do port hopping. How to block them?
>>
>> Any inputs on the same would be appreciated.
>>
>>
>> Thanks,
>>
>> Yashodhan
>>
>>
------------------------------------------------------------------------
-- >- >> Free 30-day trial: firewall with virus/spam protection, URL filtering, >VPN, >> wireless security >> >> Protect your network against hackers, viruses, spam and other risks with >Astaro >> Security Linux, the comprehensive security solution that combines six >> applications in one software solution for ease of use and lower total cost >of >> ownership. >> >> Download your free trial at >> http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301 >> ------------------------------------------------------------------------ -- >- >> > > >----------------------------------------------------------------------- ---- >Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, >wireless security > >Protect your network against hackers, viruses, spam and other risks with Astaro >Security Linux, the comprehensive security solution that combines six >applications in one software solution for ease of use and lower total cost of >ownership. > >Download your free trial at >http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301 >----------------------------------------------------------------------- ---- > > ------------------------------------------------------------------------ --- Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, wireless security Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership. Download your free trial at http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301 ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, wireless security Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership. Download your free trial at http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301 --------------------------------------------------------------------------- --------------------------------------------------------------------------- Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, wireless security Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership. Download your free trial at http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301 ---------------------------------------------------------------------------
- Previous message: Byron Sonne: "Re: nids for ipv6"
- In reply to: InfoSec: "RE: blocking p2p traffic"
- Next in thread: Jeff Kell: "Re: blocking p2p traffic"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|