RE: Skype

Look at the Skype website for details on ports:
http://www.skype.com/help/guides/firewalls/technical.html

Default Deny Egress traffic should block all traffic except that which
is explicitly allowed. Good rule but sometimes difficult to get going,
in the beginning.

I've used Websense with PIX integration and it effectively blocked Skype
traffic. I've also used MS Group Policy to deny access to skype.exe on
all systems, but this is easily circumvented should the user rename the
executable. However, my users do not have rights to install software or
to modify anything below the %PROGRAMFILES% dir. Again this is
circumvented should they bring it in on a USB key, but if you lock down
USB access as well, they wont be able to initialize the drive.

jmb

-----Original Message-----
From: Misiu [mailto:Misiu_@xxxxxx]
Sent: Wednesday, December 26, 2007 6:15 PM
To: Nikolaj; pen-test@xxxxxxxxxxxxxxxxx
Subject: Re: Skype

Any ideas how to profile skype traffic and possibly block it? I've
heard rumors that cisco content switch can detect skype traffic and
block in 90% of the cases? Any ideas on this topic and general skype
security risks for the corporate environment?

Hello,

I read recently about blocking skype. BlueSocket Proxy Applyance
http://bluecoat.com/ can do it and CheckPoint Interspect
http://www.checkpoint.com/products/interspect/.
And there are some others but I don't remember the names.

Laters,

misiu



--
No discipline is ever requisite to force attendance upon lectures which
are really worth the attending.
-- Adam Smith, "The Wealth of Nations"

GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • RE: Skype use obligation - Security x Productivity
    ... Skype use obligation - Security x Productivity ... one of our customers has its network pretty restricted, ... solution FREE - limited Time Offer ...
    (Pen-Test)
  • Re: Skype
    ... Any ideas on this topic and general skype ... Cenzic finds more, "real" vulnerabilities fast. ... buy it or download a solution FREE today! ...
    (Pen-Test)
  • RE: Skype use obligation - Security x Productivity
    ... To better control skype in a network there are few features that will help. ... Skype has a group policy template that can be installed locally or integrated into Active directory Group Policy. ... solution FREE - limited Time Offer ...
    (Pen-Test)
  • Re: Skype
    ... process to identifying and ultimately blocking all new skype ... Need to secure your web apps NOW? ... buy it or download a solution FREE today! ...
    (Pen-Test)
  • Re: Skype use obligation - Security x Productivity
    ... Some useful informations on Skype: ... applications to use Skype as an overlay network, ... solution FREE - limited Time Offer ...
    (Pen-Test)