Re: Blocking Spyware on Checkpoint 4.1

From: MooNPuP (moonpup_at_hotmail.com)
Date: 05/28/03 

Date: Wed, 28 May 2003 10:18:07 -0400

"Mike" <foor@bar.com> wrote in message
news:Xns938992A64EB0Dfoobarcom@130.133.1.4...
> msherman75@yahoo.com (Mike) wrote in news:b720c2bc.0305280455.9167272
> @posting.google.com:
>
> > Hi all. I have a client that is looking to block spyware from users
> > machines - however some solutions provided to them for certain 3rd
> > party software is not an option to them because of cost. Does anyone
> > know of a way to block spyware at the firewall on a Checkpoint 4.1
> > box?
> >
>
> IMHO, there's no simple way, because every other piece of spyware will
> behave in a different way (i.e. will connect differently).
> Just my $0.02: look at the AdAware website, perhaps they've some solution
> that can be implemented on the firewall (I'm quite happy with their
AdAware
> for my workstation).
> Kind regards,
>
> --
> Nekromancer
>
> "El nivel de conocimientos adquiridos es
> inversamente proporcional a la temperatura del cafe"

Mike,

You need to setup your client with an application proxy server. Application
proxies filter traffic based on user agent strings and not ports. You can
really fine tune outgoing allowed traffic with an application proxy. Using
the firewall and application proxy together will really tighten things up.

Relevant Pages

  • Re: Checkpoint Secure Client behind ISA 2000
    ... >Hi Mike, ... client then you'll ... The PC normally sits behind the ISA server and we ...
    (microsoft.public.isa.clients)
  • Re: Errors on Some Machines After Harware Inventory
    ... Mike ..you are not alone. ... Deploying to about 250 machines and we have ... > What happens is that on the client machines certain Apps installed using ...
    (microsoft.public.sms.inventory)
  • Re: HTTP receive issue
    ... Mike, Matt: Thanks for helping out, problem is solved (with a fresh pair of ... >> attribute for the ActiveX control, so that the client would not have to ... >> server for the control's location. ... >> Mike Vallier ...
    (microsoft.public.biztalk.general)
  • Blocking Spyware on Checkpoint 4.1
    ... I have a client that is looking to block spyware from users ... machines - however some solutions provided to them for certain 3rd ... party software is not an option to them because of cost. ...
    (comp.security.firewalls)