Re: [Full-Disclosure] Blocking Music Sharing.

["Larry Roberts" <larryr@xxxxxxxxxxx>]

MessageMark,

If you have a Cisco infrastructure you can use NBAR. NBAR looks at more than 
just port numbers to identify traffic and Cisco regularly writes new PDLMs to 
define new applications. You can also create custom lists to look for new 
applications that Cisco doesn't yet support. Check out the following link for 
more info:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_feature_guide09186a0080134add.html

HTH,
Larry Roberts
CCIE #7886 (R&S / Security)
Nexperts, Inc
"The Networking Experts"
Office: (602) 445-3915
Fax: (602) 288-8616


  ----- Original Message ----- 
  From: Johnson, Mark 
  To: full-disclosure@xxxxxxxxxxxxxxxx 
  Sent: Monday, September 15, 2003 9:37 AM
  Subject: [Full-Disclosure] Blocking Music Sharing.


  Due to the legal issues, I am trying to block access to sites like Kazaa and 
Limewire in the office.  If I am not mistaken, these networks can use different 
ports each time, so there is no way to block it at the firewall.  Is this 
right?  And if so, what is the best way to block access to these types of sites?

  Many thanks,
  Mark J.