Security Basics mailing list archives

Re: blocking file formats in the interior of the network


From: Isaac Perez <suscripcions () tsolucio com>
Date: Thu, 09 Nov 2006 18:51:32 +0100

What OS are running in the file servers¿?
Anyway aA cheap and dirty solution can be to run a script with
regularity that deletes the files with teh extensions you want.
Not as elegant as a IPS or a kind of proxy, but easy to implement and
manage.

El jue, 09-11-2006 a las 11:15 +0100, Melchior, Raimar escribió:
Hi All,

I would be very pleased if somebody could give me some advises on my
following question.

We are seeking a solution which can detect/block different file formats
(mp3, wmf, etc) in the interior of the network. There are some people
who think they can put their mp3 and other files on the server share.
Since there are a lot of authorised users who have access to those
shares we can't disallow access to shares on a per user/group basis. 
We want to filter out different fileformats and set thresholds on
allowed traffic.

I assume we need some kind of IDP oder a NAC solution which can look
into the content and blocks those traffic that is going from internal
users to the shares. 

It would be great if you could give me some suggestions on this and what
products/appliances are able of doing that.

Many Thanks.

- Raimar

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: