Re: how to block web messenger services

["Sean Krause" <archonlord () adelphia net>]

Hi
   You can also look at end point security products like Checkpoint 
Integrity or if you already have a checkpoint firewall (NGX) it will block 
IM no matter what port it tries to connect on (SmartDefense)
http://checkpoint.com/products/integrity/index.html

Sean Krause
----- Original Message ----- 
From: "Wilson Mosquera" <wmosquera () tecnoav com ec>
To: "'Brent Kern'" <bkern () sib ok gov>; "'Devin Rambo'" 
<drambo () vediorps com>; <security-basics () securityfocus com>
Sent: Tuesday, March 27, 2007 12:30 PM
Subject: RE: how to block web messenger services


> Hi
> Hi people
>
> You try application control with product of sophos.
>
> http://www.sophos.com/security/topic/application-control.html
>
>
> Wilson Mosquera
> TECNOAV
> -----Mensaje original-----
> De: listbounce () securityfocus com [mailto:listbounce () securityfocus com] En
> nombre de Brent Kern
> Enviado el: Monday, March 26, 2007 3:18 PM
> Para: Devin Rambo; security-basics () securityfocus com
> Asunto: RE: how to block web messenger services
>
> Active Directory has an .exe hash that will shut that exe down everytime
> it runs.  Trying to block by port is almost impossible they jump around.
> The other way would be if you had some type of IDP type device that uses
> signature type ACL's.
>
> Hope that helps,
> Brent
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of Devin Rambo
> Sent: Monday, March 26, 2007 7:53 AM
> To: security-basics () securityfocus com
> Subject: RE: how to block web messenger services
>
> There are companies that make appliances that can do application layer
> filtering and/or QoS. We're playing around with a Packeteer PacketShaper
> here, and so far, we're pretty impressed with what it can do. Among the
> layer 7 traffic it can regulate are all the common IM services, but
> there
> are a whole bunch of other protocols that you can work with as well -
> VOIP,
> file sharing, etc.
>
> Devin
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On
> Behalf Of Dixon, Wayne
> Sent: Friday, March 23, 2007 5:39 PM
> To: nawalmiftahi () gmail com; security-basics () securityfocus com
> Subject: RE: how to block web messenger services
>
> Short of a proxy to block the specific addresses, I myself, can't think
> of
> anyway, since the web services connect to the back end server of the IM
> services; and the only connection from your site to the web service site
> is
> via HTTP, I can't think of any other way.
>
> Wayne
>
>
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of nawalmiftahi () gmail com
> Sent: Tuesday, March 20, 2007 6:26 AM
> To: security-basics () securityfocus com
> Subject: how to block web messenger services
>
>
> Hi all ,
>   i am a security admin,yahoo messenger and other chat services are
> blocked
> on our network, but we can access them thru web(ebuddy) , i wanted to
> know
> how can we make sure that these chat services (yahoo messenger, icq, msn
> messeger ) cannot be accessed through web as well , i mean how to block
> them. thanks
>
>
>
>
>
> The contents of this electronic message, including attachments, are
> transmitted by the Oklahoma State and Education Employees Group Insurance
> Board,
> an Oklahoma government agency according to the Uniform Electronic
> Transactions Act,
> 12A O.S. 15-101 et seq.  This message is intended for use by the named
> addressee
> only and may contain information that is confidential or private according
> to state
> or federal laws.  If you have received this electronic message in error,
> please notify
> the sender by a reply to sender only message, delete it completely from 
> your
> computer
> and maintain confidentiality of the message. Any unauthorized disclosure,
> distribution, or
> use of the contents of this message is prohibited and subjects the user to
> penalty of law.